89 files changed, 2066 insertions, 278775 deletions

diff --git a/po/LINGUAS b/po/LINGUAS
index c7e6049d3..ed4e165a3 100644
--- a/po/LINGUAS
+++ b/po/LINGUAS
@@ -1,43 +1,16 @@
-as
-bg
-bn
-bn_IN
-ca
-cs
 de
-el
-en_GB
 es
-et
-fa
-fi
 fr
-he
-hi
 hu
 id
 it
-ja_JP
 ja
-ko
-lt
-mr
-nb
 nl
-nn
 pl
-pt_BR
 pt
 ru
-sk
-sq
-sr
 sv
-ta
 tg
-tr
 uk
-vi
-zh_CN
 zh_TW
 
diff --git a/po/as.po b/po/as.po
deleted file mode 100644
index ae1446058..000000000
--- a/po/as.po
+++ /dev/null
@@ -1,1463 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-11-30 04:10+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Assamese (http://www.transifex.net/projects/p/fedora/team/"
-"as/)\n"
-"Language: as\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/bg.po b/po/bg.po
deleted file mode 100644
index c1c0dda67..000000000
--- a/po/bg.po
+++ /dev/null
@@ -1,1462 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2012-02-14 12:55+0000\n"
-"Last-Translator: sgallagh <sgallagh@redhat.com>\n"
-"Language-Team: Bulgarian <trans-bg@lists.fedoraproject.org>\n"
-"Language: bg\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/bn.po b/po/bn.po
deleted file mode 100644
index f2cd3a8f5..000000000
--- a/po/bn.po
+++ /dev/null
@@ -1,1462 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-11-30 04:10+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Bengali <info@ankur.org.bd>\n"
-"Language: bn\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/bn_IN.po b/po/bn_IN.po
deleted file mode 100644
index b27756c04..000000000
--- a/po/bn_IN.po
+++ /dev/null
@@ -1,1462 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2012-02-14 12:55+0000\n"
-"Last-Translator: sgallagh <sgallagh@redhat.com>\n"
-"Language-Team: Bengali (India) <anubad@lists.ankur.org.in>\n"
-"Language: bn_IN\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/ca.po b/po/ca.po
deleted file mode 100644
index 2c915591b..000000000
--- a/po/ca.po
+++ /dev/null
@@ -1,1463 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-#   <sgallagh@redhat.com>, 2011.
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2011-12-21 10:11+0000\n"
-"Last-Translator: sgallagh <sgallagh@redhat.com>\n"
-"Language-Team: Catalan <fedora@llistes.softcatala.org>\n"
-"Language: ca\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr "Establir la verbositat de la tala de depuració"
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/cs.po b/po/cs.po
deleted file mode 100644
index a9e62898d..000000000
--- a/po/cs.po
+++ /dev/null
@@ -1,1462 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-11-30 04:10+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Czech (http://www.transifex.net/projects/p/fedora/team/cs/)\n"
-"Language: cs\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=3; plural=(n==1) ? 0 : (n>=2 && n<=4) ? 1 : 2\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/de.po b/po/de.po
index 0c3e12fb4..a32061f55 100644
--- a/po/de.po
+++ b/po/de.po
@@ -9,8 +9,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: SSSD\n"
 "Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2011-12-21 10:11+0000\n"
+"POT-Creation-Date: 2012-03-12 16:26-0400\n"
+"PO-Revision-Date: 2012-03-08 11:41+0000\n"
 "Last-Translator: sgallagh <sgallagh@redhat.com>\n"
 "Language-Team: German <trans-de@lists.fedoraproject.org>\n"
 "Language: de\n"
@@ -172,23 +172,20 @@ msgid "Password change provider"
 msgstr ""
 
 #: src/config/SSSDConfig.py:88
-#, fuzzy
 msgid "SUDO provider"
-msgstr "Identity Provider"
+msgstr ""
 
 #: src/config/SSSDConfig.py:89
-#, fuzzy
 msgid "Autofs provider"
-msgstr "Identity Provider"
+msgstr ""
 
 #: src/config/SSSDConfig.py:90
 msgid "Session-loading provider"
 msgstr ""
 
 #: src/config/SSSDConfig.py:91
-#, fuzzy
 msgid "Host identity provider"
-msgstr "Identity Provider"
+msgstr ""
 
 #: src/config/SSSDConfig.py:94
 msgid "Minimum user ID"
@@ -633,9 +630,8 @@ msgid "loginAllowedTimeMap attribute of NDS"
 msgstr ""
 
 #: src/config/SSSDConfig.py:226
-#, fuzzy
 msgid "SSH public key attribute"
-msgstr "Shell-Attribut"
+msgstr ""
 
 #: src/config/SSSDConfig.py:228
 msgid "Base DN for group lookups"
@@ -710,19 +706,16 @@ msgid "Objectclass for services"
 msgstr ""
 
 #: src/config/SSSDConfig.py:251
-#, fuzzy
 msgid "Service name attribute"
-msgstr "Benutzername-Attribut"
+msgstr ""
 
 #: src/config/SSSDConfig.py:252
-#, fuzzy
 msgid "Service port attribute"
-msgstr "Benutzername-Attribut"
+msgstr ""
 
 #: src/config/SSSDConfig.py:253
-#, fuzzy
 msgid "Service protocol attribute"
-msgstr "Shell-Attribut"
+msgstr ""
 
 #: src/config/SSSDConfig.py:257
 msgid "Policy to evaluate the password expiration"
@@ -773,23 +766,20 @@ msgid "Sudo rule command attribute"
 msgstr ""
 
 #: src/config/SSSDConfig.py:275
-#, fuzzy
 msgid "Sudo rule host attribute"
-msgstr "Shell-Attribut"
+msgstr ""
 
 #: src/config/SSSDConfig.py:276
-#, fuzzy
 msgid "Sudo rule user attribute"
-msgstr "Benutzername-Attribut"
+msgstr ""
 
 #: src/config/SSSDConfig.py:277
 msgid "Sudo rule option attribute"
 msgstr ""
 
 #: src/config/SSSDConfig.py:278
-#, fuzzy
 msgid "Sudo rule runasuser attribute"
-msgstr "Benutzername-Attribut"
+msgstr ""
 
 #: src/config/SSSDConfig.py:279
 msgid "Sudo rule runasgroup attribute"
@@ -800,23 +790,20 @@ msgid "Sudo rule notbefore attribute"
 msgstr ""
 
 #: src/config/SSSDConfig.py:281
-#, fuzzy
 msgid "Sudo rule notafter attribute"
-msgstr "Benutzername-Attribut"
+msgstr ""
 
 #: src/config/SSSDConfig.py:282
-#, fuzzy
 msgid "Sudo rule order attribute"
-msgstr "Benutzername-Attribut"
+msgstr ""
 
 #: src/config/SSSDConfig.py:285
 msgid "Object class for automounter maps"
 msgstr ""
 
 #: src/config/SSSDConfig.py:286
-#, fuzzy
 msgid "Automounter map name attribute"
-msgstr "Benutzername-Attribut"
+msgstr ""
 
 #: src/config/SSSDConfig.py:287
 msgid "Object class for automounter map entries"
@@ -893,7 +880,7 @@ msgstr ""
 msgid "An open file descriptor for the debug logs"
 msgstr ""
 
-#: src/providers/data_provider_be.c:1938
+#: src/providers/data_provider_be.c:2022
 msgid "Domain of the information provider (mandatory)"
 msgstr ""
 
@@ -994,9 +981,8 @@ msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-#, fuzzy
 msgid "The SSSD domain to use"
-msgstr "SSSD-Domains zum Starten"
+msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
diff --git a/po/el.po b/po/el.po
deleted file mode 100644
index ae1408c3c..000000000
--- a/po/el.po
+++ /dev/null
@@ -1,1462 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-11-30 04:10+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Greek <trans-el@lists.fedoraproject.org>\n"
-"Language: el\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/en_GB.po b/po/en_GB.po
deleted file mode 100644
index 5d52db556..000000000
--- a/po/en_GB.po
+++ /dev/null
@@ -1,1463 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2012-02-14 12:55+0000\n"
-"Last-Translator: sgallagh <sgallagh@redhat.com>\n"
-"Language-Team: English (United Kingdom) (http://www.transifex.net/projects/p/"
-"fedora/language/en_GB/)\n"
-"Language: en_GB\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/es.po b/po/es.po
index 004572e23..1b7ffce9f 100644
--- a/po/es.po
+++ b/po/es.po
@@ -3,6 +3,8 @@
 # This file is distributed under the same license as the PACKAGE package.
 #
 # Translators:
+# Adolfo Jayme Barrientos <fitoschido@gmail.com>, 2012.
+# Daniel Cabrera <logan@fedoraproject.org>, 2011.
 # Héctor Daniel Cabrera <logan@fedoraproject.org>, 2011.
 # Hugo Jiménez Hernández <hjimenezhdez@gmail.com>, 2011.
 #   <sgallagh@redhat.com>, 2011.
@@ -10,8 +12,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: SSSD\n"
 "Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2011-12-21 10:11+0000\n"
+"POT-Creation-Date: 2012-03-12 16:26-0400\n"
+"PO-Revision-Date: 2012-03-08 11:41+0000\n"
 "Last-Translator: sgallagh <sgallagh@redhat.com>\n"
 "Language-Team: Spanish (Castilian) <trans-es@lists.fedoraproject.org>\n"
 "Language: es\n"
@@ -171,12 +173,9 @@ msgid "Whether to evaluate the time-based attributes in sudo rules"
 msgstr ""
 
 #: src/config/SSSDConfig.py:78
-#, fuzzy
 msgid ""
 "How many seconds to keep sudorules cached before asking the provider again"
 msgstr ""
-"Cuanto segundos se mantendrá la información de identidad almacenada para "
-"solicitudes de PAM"
 
 #: src/config/SSSDConfig.py:84
 msgid "Identity provider"
@@ -195,24 +194,20 @@ msgid "Password change provider"
 msgstr "Proveedor de cambio de contraseña"
 
 #: src/config/SSSDConfig.py:88
-#, fuzzy
 msgid "SUDO provider"
-msgstr "Proveedor de identidad"
+msgstr "Proveedor de SUDO"
 
 #: src/config/SSSDConfig.py:89
-#, fuzzy
 msgid "Autofs provider"
-msgstr "Proveedor de Autenticación"
+msgstr "Proveedor de Autofs"
 
 #: src/config/SSSDConfig.py:90
-#, fuzzy
 msgid "Session-loading provider"
-msgstr "Proveedor de control de acceso"
+msgstr ""
 
 #: src/config/SSSDConfig.py:91
-#, fuzzy
 msgid "Host identity provider"
-msgstr "Proveedor de identidad"
+msgstr ""
 
 #: src/config/SSSDConfig.py:94
 msgid "Minimum user ID"
@@ -271,7 +266,7 @@ msgstr "Sustituye valor GID del proveedor de la identidad con este valor"
 
 #: src/config/SSSDConfig.py:106
 msgid "Treat usernames as case sensitive"
-msgstr ""
+msgstr "Trate al nombre de usuario con mayúsculas y minúsculas"
 
 #: src/config/SSSDConfig.py:114
 msgid "IPA domain"
@@ -315,10 +310,12 @@ msgstr ""
 #: src/config/SSSDConfig.py:122
 msgid "If set to false, host argument given by PAM will be ignored"
 msgstr ""
+"Si se lo define en 'false', será ignorado el argumento de equipo ofrecido "
+"por PAM"
 
 #: src/config/SSSDConfig.py:123
 msgid "The automounter location this IPA client is using"
-msgstr ""
+msgstr "La ubicación de montaje automático que este cliente de IPA está usando"
 
 #: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
 msgid "Kerberos server address"
@@ -462,7 +459,7 @@ msgstr "Especifica el reinado de autorización sasl a ser utilizado"
 
 #: src/config/SSSDConfig.py:167
 msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
+msgstr "Especificar los SSF mínimos para autorizaciones sasl de LDAP"
 
 #: src/config/SSSDConfig.py:168
 msgid "Kerberos service keytab"
@@ -516,6 +513,8 @@ msgstr "atributo lastUSN"
 #: src/config/SSSDConfig.py:181
 msgid "How long to retain a connection to the LDAP server before disconnecting"
 msgstr ""
+"El período de tiempo máximo para retener una conexión con el servidor LDAP "
+"antes de desconectar"
 
 #: src/config/SSSDConfig.py:183
 msgid "Disable the LDAP paging control"
@@ -676,9 +675,8 @@ msgid "loginAllowedTimeMap attribute of NDS"
 msgstr "loginAllowedTimeMap atributo de NDS"
 
 #: src/config/SSSDConfig.py:226
-#, fuzzy
 msgid "SSH public key attribute"
-msgstr "Atributo Directorio de inicio"
+msgstr "Atributo de clave pública SSH"
 
 #: src/config/SSSDConfig.py:228
 msgid "Base DN for group lookups"
@@ -745,29 +743,24 @@ msgid "Modification time attribute for netgroups"
 msgstr "Atributo de modificación de tiempo para grupos de red"
 
 #: src/config/SSSDConfig.py:249
-#, fuzzy
 msgid "Base DN for service lookups"
-msgstr "DN base para búsquedas de usuario"
+msgstr ""
 
 #: src/config/SSSDConfig.py:250
-#, fuzzy
 msgid "Objectclass for services"
-msgstr "Objectclass para los usuarios"
+msgstr ""
 
 #: src/config/SSSDConfig.py:251
-#, fuzzy
 msgid "Service name attribute"
-msgstr "Atributo Username"
+msgstr ""
 
 #: src/config/SSSDConfig.py:252
-#, fuzzy
 msgid "Service port attribute"
-msgstr "Atributo Directorio de inicio"
+msgstr ""
 
 #: src/config/SSSDConfig.py:253
-#, fuzzy
 msgid "Service protocol attribute"
-msgstr "Atributo shell"
+msgstr ""
 
 #: src/config/SSSDConfig.py:257
 msgid "Policy to evaluate the password expiration"
@@ -798,102 +791,84 @@ msgstr ""
 "Nombre del servicio DNS para el servidor de modificación de contraseñas LDAP"
 
 #: src/config/SSSDConfig.py:269
-#, fuzzy
 msgid "Base DN for sudo rules lookups"
-msgstr "DN base para búsquedas de usuario"
+msgstr ""
 
 #: src/config/SSSDConfig.py:270
 msgid "Enable periodical update of all sudo rules"
 msgstr ""
 
 #: src/config/SSSDConfig.py:271
-#, fuzzy
 msgid "Length of time between rules updates"
-msgstr "Tiempo en segundos entre las actualizaciones de enumeración"
+msgstr ""
 
 #: src/config/SSSDConfig.py:272
-#, fuzzy
 msgid "Object class for sudo rules"
-msgstr "Objectclass para los usuarios"
+msgstr ""
 
 #: src/config/SSSDConfig.py:273
 msgid "Sudo rule name"
 msgstr ""
 
 #: src/config/SSSDConfig.py:274
-#, fuzzy
 msgid "Sudo rule command attribute"
-msgstr "Atributo Directorio de inicio"
+msgstr ""
 
 #: src/config/SSSDConfig.py:275
-#, fuzzy
 msgid "Sudo rule host attribute"
-msgstr "atributo lastUSN"
+msgstr ""
 
 #: src/config/SSSDConfig.py:276
-#, fuzzy
 msgid "Sudo rule user attribute"
-msgstr "Atributo de miembro del grupo"
+msgstr ""
 
 #: src/config/SSSDConfig.py:277
-#, fuzzy
 msgid "Sudo rule option attribute"
-msgstr "Atributo Directorio de inicio"
+msgstr ""
 
 #: src/config/SSSDConfig.py:278
-#, fuzzy
 msgid "Sudo rule runasuser attribute"
-msgstr "Atributo Username"
+msgstr ""
 
 #: src/config/SSSDConfig.py:279
-#, fuzzy
 msgid "Sudo rule runasgroup attribute"
-msgstr "Atributo UUID de miembro de red"
+msgstr ""
 
 #: src/config/SSSDConfig.py:280
-#, fuzzy
 msgid "Sudo rule notbefore attribute"
-msgstr "Atributo Directorio de inicio"
+msgstr ""
 
 #: src/config/SSSDConfig.py:281
-#, fuzzy
 msgid "Sudo rule notafter attribute"
-msgstr "Atributo Directorio de inicio"
+msgstr ""
 
 #: src/config/SSSDConfig.py:282
-#, fuzzy
 msgid "Sudo rule order attribute"
-msgstr "Atributo Directorio de inicio"
+msgstr ""
 
 #: src/config/SSSDConfig.py:285
-#, fuzzy
 msgid "Object class for automounter maps"
-msgstr "Objectclass para los usuarios"
+msgstr ""
 
 #: src/config/SSSDConfig.py:286
-#, fuzzy
 msgid "Automounter map name attribute"
-msgstr "Atributo Username"
+msgstr ""
 
 #: src/config/SSSDConfig.py:287
-#, fuzzy
 msgid "Object class for automounter map entries"
-msgstr "Objectclass para los usuarios"
+msgstr ""
 
 #: src/config/SSSDConfig.py:288
-#, fuzzy
 msgid "Automounter map entry key attribute"
-msgstr "Atributo Directorio de inicio"
+msgstr ""
 
 #: src/config/SSSDConfig.py:289
-#, fuzzy
 msgid "Automounter map entry value attribute"
-msgstr "Atributo triple de grupo de red"
+msgstr ""
 
 #: src/config/SSSDConfig.py:290
-#, fuzzy
 msgid "Base DN for automounter map lookups"
-msgstr "DN base para búsquedas de usuario"
+msgstr ""
 
 #: src/config/SSSDConfig.py:293
 msgid "Comma separated list of allowed users"
@@ -933,7 +908,7 @@ msgstr "Indicar un archivo de configuración diferente al predeterminado"
 
 #: src/monitor/monitor.c:2385
 msgid "Print version number and exit"
-msgstr ""
+msgstr "Muestra el número de versión y finaliza"
 
 #: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
 #: src/util/util.h:89
@@ -954,7 +929,7 @@ msgstr "Mostrar marcas de tiempo con microsegundos"
 msgid "An open file descriptor for the debug logs"
 msgstr "Un arhivo abierto de descriptor para los registros de depuración"
 
-#: src/providers/data_provider_be.c:1938
+#: src/providers/data_provider_be.c:2022
 msgid "Domain of the information provider (mandatory)"
 msgstr "Dominio del proveedor de información (obligatorio)"
 
@@ -1056,9 +1031,8 @@ msgstr "Nivel de depuración en que se debe ejecutar"
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-#, fuzzy
 msgid "The SSSD domain to use"
-msgstr "Dominios SSSD a iniciar"
+msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
@@ -1073,9 +1047,8 @@ msgstr "Error al poner la región\n"
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-#, fuzzy
 msgid "Not enough memory\n"
-msgstr "Falta memoria\n"
+msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
 msgid "User not specified\n"
@@ -1553,9 +1526,8 @@ msgid "\n"
 msgstr ""
 
 #: src/tools/sss_debuglevel.c:102
-#, fuzzy
 msgid "Specify debug level you want to set\n"
-msgstr "Nivel de depuración en que se debe ejecutar"
+msgstr ""
 
 #: src/tools/tools_util.c:286
 msgid "Out of memory\n"
diff --git a/po/et.po b/po/et.po
deleted file mode 100644
index adff7c945..000000000
--- a/po/et.po
+++ /dev/null
@@ -1,1463 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-11-30 04:10+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Estonian (http://www.transifex.net/projects/p/fedora/team/"
-"et/)\n"
-"Language: et\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/fa.po b/po/fa.po
deleted file mode 100644
index 5b081beb1..000000000
--- a/po/fa.po
+++ /dev/null
@@ -1,1463 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-11-30 04:10+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Persian (http://www.transifex.net/projects/p/fedora/team/"
-"fa/)\n"
-"Language: fa\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=1; plural=0\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/fi.po b/po/fi.po
deleted file mode 100644
index 64932ba10..000000000
--- a/po/fi.po
+++ /dev/null
@@ -1,1463 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-11-30 04:10+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Finnish (http://www.transifex.net/projects/p/fedora/team/"
-"fi/)\n"
-"Language: fi\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/fr.po b/po/fr.po
index 6edfc548c..135956dab 100644
--- a/po/fr.po
+++ b/po/fr.po
@@ -3,12 +3,13 @@
 # This file is distributed under the same license as the PACKAGE package.
 #
 # Translators:
+# Fabien Archambault <marbolangos@gmail.com>, 2012.
 msgid ""
 msgstr ""
 "Project-Id-Version: SSSD\n"
 "Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2012-02-23 12:39+0000\n"
+"POT-Creation-Date: 2012-03-12 16:26-0400\n"
+"PO-Revision-Date: 2012-03-08 11:41+0000\n"
 "Last-Translator: Fabien Archambault <marbolangos@gmail.com>\n"
 "Language-Team: French <trans-fr@lists.fedoraproject.org>\n"
 "Language: fr\n"
@@ -848,9 +849,8 @@ msgid "Automounter map entry value attribute"
 msgstr ""
 
 #: src/config/SSSDConfig.py:290
-#, fuzzy
 msgid "Base DN for automounter map lookups"
-msgstr "Base DN pour les recherches  d'utilisateurs"
+msgstr ""
 
 #: src/config/SSSDConfig.py:293
 msgid "Comma separated list of allowed users"
@@ -911,7 +911,7 @@ msgstr ""
 msgid "An open file descriptor for the debug logs"
 msgstr "Un descripteur de fichier ouvert pour les journaux de débogage"
 
-#: src/providers/data_provider_be.c:1938
+#: src/providers/data_provider_be.c:2022
 msgid "Domain of the information provider (mandatory)"
 msgstr "Domaine du fournisseur d'informations (obligatoire)"
 
@@ -1015,9 +1015,8 @@ msgstr "Le niveau de débogage utilisé avec"
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-#, fuzzy
 msgid "The SSSD domain to use"
-msgstr "Domaines SSSD à démarrer"
+msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
@@ -1032,9 +1031,8 @@ msgstr "Erreur lors du paramétrage de la locale\n"
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-#, fuzzy
 msgid "Not enough memory\n"
-msgstr "Mémoire saturée\n"
+msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
 msgid "User not specified\n"
@@ -1518,12 +1516,11 @@ msgstr ""
 
 #: src/tools/sss_debuglevel.c:43
 msgid "\n"
-msgstr ""
+msgstr "\n"
 
 #: src/tools/sss_debuglevel.c:102
-#, fuzzy
 msgid "Specify debug level you want to set\n"
-msgstr "Le niveau de débogage utilisé avec"
+msgstr ""
 
 #: src/tools/tools_util.c:286
 msgid "Out of memory\n"
diff --git a/po/he.po b/po/he.po
deleted file mode 100644
index 3246d2943..000000000
--- a/po/he.po
+++ /dev/null
@@ -1,1462 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-11-30 04:10+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Hebrew <he-users@lists.fedoraproject.org>\n"
-"Language: he\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/hi.po b/po/hi.po
deleted file mode 100644
index eaa35de5f..000000000
--- a/po/hi.po
+++ /dev/null
@@ -1,1462 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2012-02-14 12:55+0000\n"
-"Last-Translator: sgallagh <sgallagh@redhat.com>\n"
-"Language-Team: Hindi <indlinux-hindi@lists.sourceforge.net>\n"
-"Language: hi\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/hu.po b/po/hu.po
index dfce64ca8..06b87efc7 100644
--- a/po/hu.po
+++ b/po/hu.po
@@ -8,8 +8,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: SSSD\n"
 "Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2011-12-21 10:11+0000\n"
+"POT-Creation-Date: 2012-03-12 16:26-0400\n"
+"PO-Revision-Date: 2012-03-08 11:42+0000\n"
 "Last-Translator: sgallagh <sgallagh@redhat.com>\n"
 "Language-Team: Hungarian <trans-hu@lists.fedoraproject.org>\n"
 "Language: hu\n"
@@ -175,18 +175,16 @@ msgid "SUDO provider"
 msgstr ""
 
 #: src/config/SSSDConfig.py:89
-#, fuzzy
 msgid "Autofs provider"
-msgstr "Azonosító-kiszolgáló"
+msgstr ""
 
 #: src/config/SSSDConfig.py:90
 msgid "Session-loading provider"
 msgstr ""
 
 #: src/config/SSSDConfig.py:91
-#, fuzzy
 msgid "Host identity provider"
-msgstr "Azonosító-kiszolgáló"
+msgstr ""
 
 #: src/config/SSSDConfig.py:94
 msgid "Minimum user ID"
@@ -881,7 +879,7 @@ msgstr "Mikroszekundum pontosságú időbélyegek"
 msgid "An open file descriptor for the debug logs"
 msgstr ""
 
-#: src/providers/data_provider_be.c:1938
+#: src/providers/data_provider_be.c:2022
 msgid "Domain of the information provider (mandatory)"
 msgstr ""
 
@@ -982,9 +980,8 @@ msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-#, fuzzy
 msgid "The SSSD domain to use"
-msgstr "A felhasználó UID-je"
+msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
@@ -999,9 +996,8 @@ msgstr ""
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-#, fuzzy
 msgid "Not enough memory\n"
-msgstr "Elfogyott a memória\n"
+msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
 msgid "User not specified\n"
diff --git a/po/id.po b/po/id.po
index b95624f9a..ce4d22d0c 100644
--- a/po/id.po
+++ b/po/id.po
@@ -7,8 +7,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: SSSD\n"
 "Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2011-12-21 10:11+0000\n"
+"POT-Creation-Date: 2012-03-12 16:26-0400\n"
+"PO-Revision-Date: 2012-03-08 11:41+0000\n"
 "Last-Translator: sgallagh <sgallagh@redhat.com>\n"
 "Language-Team: Indonesian <trans-id@lists.fedoraproject.org>\n"
 "Language: id\n"
@@ -170,24 +170,20 @@ msgid "Password change provider"
 msgstr "Penyedia pengubah kata sandi"
 
 #: src/config/SSSDConfig.py:88
-#, fuzzy
 msgid "SUDO provider"
-msgstr "Penyedia identitas"
+msgstr ""
 
 #: src/config/SSSDConfig.py:89
-#, fuzzy
 msgid "Autofs provider"
-msgstr "Penyedia otentikasi"
+msgstr ""
 
 #: src/config/SSSDConfig.py:90
-#, fuzzy
 msgid "Session-loading provider"
-msgstr "Penyedia kontrol akses"
+msgstr ""
 
 #: src/config/SSSDConfig.py:91
-#, fuzzy
 msgid "Host identity provider"
-msgstr "Penyedia identitas"
+msgstr ""
 
 #: src/config/SSSDConfig.py:94
 msgid "Minimum user ID"
@@ -632,9 +628,8 @@ msgid "loginAllowedTimeMap attribute of NDS"
 msgstr ""
 
 #: src/config/SSSDConfig.py:226
-#, fuzzy
 msgid "SSH public key attribute"
-msgstr "Atribut direktori Home"
+msgstr ""
 
 #: src/config/SSSDConfig.py:228
 msgid "Base DN for group lookups"
@@ -701,29 +696,24 @@ msgid "Modification time attribute for netgroups"
 msgstr ""
 
 #: src/config/SSSDConfig.py:249
-#, fuzzy
 msgid "Base DN for service lookups"
-msgstr "Filter pencarian pengguna"
+msgstr ""
 
 #: src/config/SSSDConfig.py:250
-#, fuzzy
 msgid "Objectclass for services"
-msgstr "Objectclass untuk pengguna"
+msgstr ""
 
 #: src/config/SSSDConfig.py:251
-#, fuzzy
 msgid "Service name attribute"
-msgstr "Atribut Nama pengguna"
+msgstr ""
 
 #: src/config/SSSDConfig.py:252
-#, fuzzy
 msgid "Service port attribute"
-msgstr "Atribut direktori Home"
+msgstr ""
 
 #: src/config/SSSDConfig.py:253
-#, fuzzy
 msgid "Service protocol attribute"
-msgstr "Atribut Shell"
+msgstr ""
 
 #: src/config/SSSDConfig.py:257
 msgid "Policy to evaluate the password expiration"
@@ -750,9 +740,8 @@ msgid "DNS service name for LDAP password change server"
 msgstr ""
 
 #: src/config/SSSDConfig.py:269
-#, fuzzy
 msgid "Base DN for sudo rules lookups"
-msgstr "Filter pencarian pengguna"
+msgstr ""
 
 #: src/config/SSSDConfig.py:270
 msgid "Enable periodical update of all sudo rules"
@@ -763,86 +752,72 @@ msgid "Length of time between rules updates"
 msgstr ""
 
 #: src/config/SSSDConfig.py:272
-#, fuzzy
 msgid "Object class for sudo rules"
-msgstr "Objectclass untuk pengguna"
+msgstr ""
 
 #: src/config/SSSDConfig.py:273
 msgid "Sudo rule name"
 msgstr ""
 
 #: src/config/SSSDConfig.py:274
-#, fuzzy
 msgid "Sudo rule command attribute"
-msgstr "Atribut direktori Home"
+msgstr ""
 
 #: src/config/SSSDConfig.py:275
-#, fuzzy
 msgid "Sudo rule host attribute"
-msgstr "Atribut direktori Home"
+msgstr ""
 
 #: src/config/SSSDConfig.py:276
-#, fuzzy
 msgid "Sudo rule user attribute"
-msgstr "Atribut direktori Home"
+msgstr ""
 
 #: src/config/SSSDConfig.py:277
-#, fuzzy
 msgid "Sudo rule option attribute"
-msgstr "Atribut direktori Home"
+msgstr ""
 
 #: src/config/SSSDConfig.py:278
-#, fuzzy
 msgid "Sudo rule runasuser attribute"
-msgstr "Atribut Nama pengguna"
+msgstr ""
 
 #: src/config/SSSDConfig.py:279
 msgid "Sudo rule runasgroup attribute"
 msgstr ""
 
 #: src/config/SSSDConfig.py:280
-#, fuzzy
 msgid "Sudo rule notbefore attribute"
-msgstr "Atribut direktori Home"
+msgstr ""
 
 #: src/config/SSSDConfig.py:281
-#, fuzzy
 msgid "Sudo rule notafter attribute"
-msgstr "Atribut direktori Home"
+msgstr ""
 
 #: src/config/SSSDConfig.py:282
-#, fuzzy
 msgid "Sudo rule order attribute"
-msgstr "Atribut direktori Home"
+msgstr ""
 
 #: src/config/SSSDConfig.py:285
-#, fuzzy
 msgid "Object class for automounter maps"
-msgstr "Objectclass untuk pengguna"
+msgstr ""
 
 #: src/config/SSSDConfig.py:286
-#, fuzzy
 msgid "Automounter map name attribute"
-msgstr "Atribut Nama pengguna"
+msgstr ""
 
 #: src/config/SSSDConfig.py:287
-#, fuzzy
 msgid "Object class for automounter map entries"
-msgstr "Objectclass untuk pengguna"
+msgstr ""
 
 #: src/config/SSSDConfig.py:288
-#, fuzzy
 msgid "Automounter map entry key attribute"
-msgstr "Atribut direktori Home"
+msgstr ""
 
 #: src/config/SSSDConfig.py:289
 msgid "Automounter map entry value attribute"
 msgstr ""
 
 #: src/config/SSSDConfig.py:290
-#, fuzzy
 msgid "Base DN for automounter map lookups"
-msgstr "Filter pencarian pengguna"
+msgstr ""
 
 #: src/config/SSSDConfig.py:293
 msgid "Comma separated list of allowed users"
@@ -903,7 +878,7 @@ msgstr ""
 msgid "An open file descriptor for the debug logs"
 msgstr ""
 
-#: src/providers/data_provider_be.c:1938
+#: src/providers/data_provider_be.c:2022
 msgid "Domain of the information provider (mandatory)"
 msgstr ""
 
@@ -1004,9 +979,8 @@ msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-#, fuzzy
 msgid "The SSSD domain to use"
-msgstr "Domain SSSD akan dijalankan"
+msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
@@ -1021,9 +995,8 @@ msgstr ""
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-#, fuzzy
 msgid "Not enough memory\n"
-msgstr "Kehabisan memori\n"
+msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
 msgid "User not specified\n"
diff --git a/po/it.po b/po/it.po
index 6fd4940e4..e5cc7624d 100644
--- a/po/it.po
+++ b/po/it.po
@@ -8,8 +8,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: SSSD\n"
 "Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2011-12-21 10:11+0000\n"
+"POT-Creation-Date: 2012-03-12 16:26-0400\n"
+"PO-Revision-Date: 2012-03-08 11:41+0000\n"
 "Last-Translator: sgallagh <sgallagh@redhat.com>\n"
 "Language-Team: Italian <trans-it@lists.fedoraproject.org>\n"
 "Language: it\n"
@@ -174,24 +174,20 @@ msgid "Password change provider"
 msgstr "Provider di cambio password"
 
 #: src/config/SSSDConfig.py:88
-#, fuzzy
 msgid "SUDO provider"
-msgstr "Provider di identità"
+msgstr ""
 
 #: src/config/SSSDConfig.py:89
-#, fuzzy
 msgid "Autofs provider"
-msgstr "Provider di autenticazione"
+msgstr ""
 
 #: src/config/SSSDConfig.py:90
-#, fuzzy
 msgid "Session-loading provider"
-msgstr "Provider di access control"
+msgstr ""
 
 #: src/config/SSSDConfig.py:91
-#, fuzzy
 msgid "Host identity provider"
-msgstr "Provider di identità"
+msgstr ""
 
 #: src/config/SSSDConfig.py:94
 msgid "Minimum user ID"
@@ -643,9 +639,8 @@ msgid "loginAllowedTimeMap attribute of NDS"
 msgstr ""
 
 #: src/config/SSSDConfig.py:226
-#, fuzzy
 msgid "SSH public key attribute"
-msgstr "Attributo della home directory"
+msgstr ""
 
 #: src/config/SSSDConfig.py:228
 msgid "Base DN for group lookups"
@@ -712,29 +707,24 @@ msgid "Modification time attribute for netgroups"
 msgstr ""
 
 #: src/config/SSSDConfig.py:249
-#, fuzzy
 msgid "Base DN for service lookups"
-msgstr "Base DN per i lookup utente"
+msgstr ""
 
 #: src/config/SSSDConfig.py:250
-#, fuzzy
 msgid "Objectclass for services"
-msgstr "Objectclass per gli utenti"
+msgstr ""
 
 #: src/config/SSSDConfig.py:251
-#, fuzzy
 msgid "Service name attribute"
-msgstr "Attributo del nome utente"
+msgstr ""
 
 #: src/config/SSSDConfig.py:252
-#, fuzzy
 msgid "Service port attribute"
-msgstr "Attributo della home directory"
+msgstr ""
 
 #: src/config/SSSDConfig.py:253
-#, fuzzy
 msgid "Service protocol attribute"
-msgstr "Attributo della shell"
+msgstr ""
 
 #: src/config/SSSDConfig.py:257
 msgid "Policy to evaluate the password expiration"
@@ -761,100 +751,84 @@ msgid "DNS service name for LDAP password change server"
 msgstr ""
 
 #: src/config/SSSDConfig.py:269
-#, fuzzy
 msgid "Base DN for sudo rules lookups"
-msgstr "Base DN per i lookup utente"
+msgstr ""
 
 #: src/config/SSSDConfig.py:270
 msgid "Enable periodical update of all sudo rules"
 msgstr ""
 
 #: src/config/SSSDConfig.py:271
-#, fuzzy
 msgid "Length of time between rules updates"
-msgstr "Durata tra gli aggiornamenti alle enumeration"
+msgstr ""
 
 #: src/config/SSSDConfig.py:272
-#, fuzzy
 msgid "Object class for sudo rules"
-msgstr "Objectclass per gli utenti"
+msgstr ""
 
 #: src/config/SSSDConfig.py:273
 msgid "Sudo rule name"
 msgstr ""
 
 #: src/config/SSSDConfig.py:274
-#, fuzzy
 msgid "Sudo rule command attribute"
-msgstr "Attributo della home directory"
+msgstr ""
 
 #: src/config/SSSDConfig.py:275
-#, fuzzy
 msgid "Sudo rule host attribute"
-msgstr "Attributo della home directory"
+msgstr ""
 
 #: src/config/SSSDConfig.py:276
-#, fuzzy
 msgid "Sudo rule user attribute"
-msgstr "Attributo della home directory"
+msgstr ""
 
 #: src/config/SSSDConfig.py:277
-#, fuzzy
 msgid "Sudo rule option attribute"
-msgstr "Attributo della home directory"
+msgstr ""
 
 #: src/config/SSSDConfig.py:278
-#, fuzzy
 msgid "Sudo rule runasuser attribute"
-msgstr "Attributo del nome utente"
+msgstr ""
 
 #: src/config/SSSDConfig.py:279
 msgid "Sudo rule runasgroup attribute"
 msgstr ""
 
 #: src/config/SSSDConfig.py:280
-#, fuzzy
 msgid "Sudo rule notbefore attribute"
-msgstr "Attributo della home directory"
+msgstr ""
 
 #: src/config/SSSDConfig.py:281
-#, fuzzy
 msgid "Sudo rule notafter attribute"
-msgstr "Attributo della home directory"
+msgstr ""
 
 #: src/config/SSSDConfig.py:282
-#, fuzzy
 msgid "Sudo rule order attribute"
-msgstr "Attributo della home directory"
+msgstr ""
 
 #: src/config/SSSDConfig.py:285
-#, fuzzy
 msgid "Object class for automounter maps"
-msgstr "Objectclass per gli utenti"
+msgstr ""
 
 #: src/config/SSSDConfig.py:286
-#, fuzzy
 msgid "Automounter map name attribute"
-msgstr "Attributo del nome utente"
+msgstr ""
 
 #: src/config/SSSDConfig.py:287
-#, fuzzy
 msgid "Object class for automounter map entries"
-msgstr "Objectclass per gli utenti"
+msgstr ""
 
 #: src/config/SSSDConfig.py:288
-#, fuzzy
 msgid "Automounter map entry key attribute"
-msgstr "Attributo della home directory"
+msgstr ""
 
 #: src/config/SSSDConfig.py:289
 msgid "Automounter map entry value attribute"
 msgstr ""
 
 #: src/config/SSSDConfig.py:290
-#, fuzzy
 msgid "Base DN for automounter map lookups"
-msgstr "Base DN per i lookup utente"
+msgstr ""
 
 #: src/config/SSSDConfig.py:293
 msgid "Comma separated list of allowed users"
@@ -915,7 +889,7 @@ msgstr ""
 msgid "An open file descriptor for the debug logs"
 msgstr "Un descrittore di file aperto per l'output di debug"
 
-#: src/providers/data_provider_be.c:1938
+#: src/providers/data_provider_be.c:2022
 msgid "Domain of the information provider (mandatory)"
 msgstr "Dominio del provider di informazioni (obbligatorio)"
 
@@ -1016,9 +990,8 @@ msgstr "Il livello di debug da utilizzare"
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-#, fuzzy
 msgid "The SSSD domain to use"
-msgstr "Avvio dei domini SSSD"
+msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
@@ -1033,9 +1006,8 @@ msgstr "Errore di impostazione del locale\n"
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-#, fuzzy
 msgid "Not enough memory\n"
-msgstr "Memoria esaurita\n"
+msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
 msgid "User not specified\n"
@@ -1510,9 +1482,8 @@ msgid "\n"
 msgstr ""
 
 #: src/tools/sss_debuglevel.c:102
-#, fuzzy
 msgid "Specify debug level you want to set\n"
-msgstr "Il livello di debug da utilizzare"
+msgstr ""
 
 #: src/tools/tools_util.c:286
 msgid "Out of memory\n"
diff --git a/po/ja.po b/po/ja.po
index eb43a9aef..76d9ac9e0 100644
--- a/po/ja.po
+++ b/po/ja.po
@@ -8,8 +8,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: SSSD\n"
 "Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2012-02-28 10:21+0000\n"
+"POT-Creation-Date: 2012-03-12 16:26-0400\n"
+"PO-Revision-Date: 2012-03-08 11:41+0000\n"
 "Last-Translator: Tomoyuki KATO <tomo@dream.daynight.jp>\n"
 "Language-Team: Japanese <trans-ja@lists.fedoraproject.org>\n"
 "Language: ja\n"
@@ -823,7 +823,6 @@ msgid "Automounter map entry value attribute"
 msgstr "automounter マップエントリー�値属性"
 
 #: src/config/SSSDConfig.py:290
-#, fuzzy
 msgid "Base DN for automounter map lookups"
 msgstr "automonter �マップ検索�ベース DN"
 
@@ -886,7 +885,7 @@ msgstr "タイムスタンプをミリ秒���表示�る"
 msgid "An open file descriptor for the debug logs"
 msgstr "デ�ッグログ�オープンファイルディスクリプター"
 
-#: src/providers/data_provider_be.c:1938
+#: src/providers/data_provider_be.c:2022
 msgid "Domain of the information provider (mandatory)"
 msgstr "情報プロ�イダー�ドメイン (必須)"
 
@@ -988,9 +987,8 @@ msgstr "実行�るデ�ッグレベル"
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-#, fuzzy
 msgid "The SSSD domain to use"
-msgstr "開始�る SSSD ドメイン"
+msgstr "使用�る SSSD ドメイン"
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
@@ -1005,42 +1003,41 @@ msgstr "ロケール�設定中�エラー�発生����\n"
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-#, fuzzy
 msgid "Not enough memory\n"
-msgstr "メモリー�足\n"
+msgstr "�分�メモリー��り��ん\n"
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
 msgid "User not specified\n"
-msgstr ""
+msgstr "ユーザー�指定�れ����ん\n"
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
 msgid "Error looking up public keys\n"
-msgstr ""
+msgstr "公開��検索中�エラー�発生����\n"
 
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
 msgid "Failed to open a socket\n"
-msgstr ""
+msgstr "ソケット�オープン�失敗����\n"
 
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
 msgid "Failed to connect to the server\n"
-msgstr ""
+msgstr "サー�ー��接続�失敗����\n"
 
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
 msgid "Failed to execute proxy command\n"
-msgstr ""
+msgstr "プロキシーコマンド�実行�失敗����\n"
 
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
 msgid "The port to use to connect to the host"
-msgstr ""
+msgstr "ホスト��接続�使用�る�ート"
 
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
 msgid "Host not specified\n"
-msgstr ""
+msgstr "ホスト�指定�れ����ん\n"
 
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
 msgid "The path to the proxy command must be absolute\n"
-msgstr ""
+msgstr "プロキシーコマンド��パス�絶対パス��る必���り��\n"
 
 #: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
 msgid "The UID of the user"
@@ -1443,49 +1440,48 @@ msgstr "トランザクションエラー。ユーザーを変更����ん
 #: src/tools/sss_cache.c:132
 #, c-format
 msgid "Couldn't invalidate %s"
-msgstr ""
+msgstr "%s を無効化����ん���"
 
 #: src/tools/sss_cache.c:138
 #, c-format
 msgid "Couldn't invalidate %s %s"
-msgstr ""
+msgstr "%s %s を無効化����ん���"
 
 #: src/tools/sss_cache.c:262
 msgid "Invalidate particular user"
-msgstr ""
+msgstr "特定�ユーザーを無効��る"
 
 #: src/tools/sss_cache.c:264
 msgid "Invalidate all users"
-msgstr ""
+msgstr "����ユーザーを無効��る"
 
 #: src/tools/sss_cache.c:266
 msgid "Invalidate particular group"
-msgstr ""
+msgstr "特定�グループを無効��る"
 
 #: src/tools/sss_cache.c:268
 msgid "Invalidate all groups"
-msgstr ""
+msgstr "����グループを無効��る"
 
 #: src/tools/sss_cache.c:270
 msgid "Invalidate particular netgroup"
-msgstr ""
+msgstr "特定��ットワークグループを無効��る"
 
 #: src/tools/sss_cache.c:272
 msgid "Invalidate all netgroups"
-msgstr ""
+msgstr "�����ットワークグループを無効��る"
 
 #: src/tools/sss_cache.c:274
 msgid "Only invalidate entries from a particular domain"
-msgstr ""
+msgstr "特定�ドメイン���らエントリーを無効��る"
 
 #: src/tools/sss_debuglevel.c:43
 msgid "\n"
-msgstr ""
+msgstr "\n"
 
 #: src/tools/sss_debuglevel.c:102
-#, fuzzy
 msgid "Specify debug level you want to set\n"
-msgstr "実行�るデ�ッグレベル"
+msgstr "設定���デ�ッグレベルを指定�る\n"
 
 #: src/tools/tools_util.c:286
 msgid "Out of memory\n"
diff --git a/po/ja_JP.po b/po/ja_JP.po
deleted file mode 100644
index b808f2a29..000000000
--- a/po/ja_JP.po
+++ /dev/null
@@ -1,1462 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-11-30 04:10+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: LANGUAGE <LL@li.org>\n"
-"Language: ja_JP\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=1; plural=0\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/ko.po b/po/ko.po
deleted file mode 100644
index e3174aad8..000000000
--- a/po/ko.po
+++ /dev/null
@@ -1,1462 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-11-30 04:10+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Korean (http://www.transifex.net/projects/p/fedora/team/ko/)\n"
-"Language: ko\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=1; plural=0\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/lt.po b/po/lt.po
deleted file mode 100644
index 28e461bd6..000000000
--- a/po/lt.po
+++ /dev/null
@@ -1,1464 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-11-30 04:10+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Lithuanian (http://www.transifex.net/projects/p/fedora/team/"
-"lt/)\n"
-"Language: lt\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && (n"
-"%100<10 || n%100>=20) ? 1 : 2)\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/mr.po b/po/mr.po
deleted file mode 100644
index f8eadcb2a..000000000
--- a/po/mr.po
+++ /dev/null
@@ -1,1463 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2012-02-14 12:55+0000\n"
-"Last-Translator: sgallagh <sgallagh@redhat.com>\n"
-"Language-Team: Marathi (http://www.transifex.net/projects/p/fedora/language/"
-"mr/)\n"
-"Language: mr\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/nb.po b/po/nb.po
deleted file mode 100644
index 30d448017..000000000
--- a/po/nb.po
+++ /dev/null
@@ -1,1462 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-11-30 04:10+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Norwegian Bokmål <i18n-nb@lister.ping.uio.no>\n"
-"Language: nb\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/nl.po b/po/nl.po
index ed269d88c..eb20885f0 100644
--- a/po/nl.po
+++ b/po/nl.po
@@ -11,9 +11,9 @@ msgid ""
 msgstr ""
 "Project-Id-Version: SSSD\n"
 "Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2012-02-28 09:07+0000\n"
-"Last-Translator: Richard E. van der Luit <nippur@fedoraproject.org>\n"
+"POT-Creation-Date: 2012-03-12 16:26-0400\n"
+"PO-Revision-Date: 2012-03-08 11:41+0000\n"
+"Last-Translator: sgallagh <sgallagh@redhat.com>\n"
 "Language-Team: Dutch (http://www.transifex.net/projects/p/fedora/language/"
 "nl/)\n"
 "Language: nl\n"
@@ -863,9 +863,8 @@ msgid "Automounter map entry value attribute"
 msgstr "Automounter map ingavewaarde attribuut"
 
 #: src/config/SSSDConfig.py:290
-#, fuzzy
 msgid "Base DN for automounter map lookups"
-msgstr "Basis DN voor automounter map lookups"
+msgstr ""
 
 #: src/config/SSSDConfig.py:293
 msgid "Comma separated list of allowed users"
@@ -926,7 +925,7 @@ msgstr "Toon tijdstempel met microseconden"
 msgid "An open file descriptor for the debug logs"
 msgstr "Een geopend bestand voor de debug logs"
 
-#: src/providers/data_provider_be.c:1938
+#: src/providers/data_provider_be.c:2022
 msgid "Domain of the information provider (mandatory)"
 msgstr "Domein voor de informatie provider (verplicht)"
 
@@ -1028,9 +1027,8 @@ msgstr "Het debugniveau waarmee gestart wordt"
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-#, fuzzy
 msgid "The SSSD domain to use"
-msgstr "SSSD Domeinen die gestart moeten worden"
+msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
@@ -1045,9 +1043,8 @@ msgstr "Fout bij het zetten van de locale\n"
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-#, fuzzy
 msgid "Not enough memory\n"
-msgstr "Het geheugen zit vol\n"
+msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
 msgid "User not specified\n"
@@ -1525,9 +1522,8 @@ msgid "\n"
 msgstr ""
 
 #: src/tools/sss_debuglevel.c:102
-#, fuzzy
 msgid "Specify debug level you want to set\n"
-msgstr "Het debugniveau waarmee gestart wordt"
+msgstr ""
 
 #: src/tools/tools_util.c:286
 msgid "Out of memory\n"
diff --git a/po/nn.po b/po/nn.po
deleted file mode 100644
index e597c655b..000000000
--- a/po/nn.po
+++ /dev/null
@@ -1,1462 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-11-30 04:10+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Norwegian Nynorsk <i18n-nn@lister.ping.uio.no>\n"
-"Language: nn\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/pl.po b/po/pl.po
index dfc2ed683..d5aff9e47 100644
--- a/po/pl.po
+++ b/po/pl.po
@@ -9,8 +9,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: SSSD\n"
 "Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2012-02-24 19:08+0000\n"
+"POT-Creation-Date: 2012-03-12 16:26-0400\n"
+"PO-Revision-Date: 2012-03-08 11:41+0000\n"
 "Last-Translator: Piotr DrÄ…g <piotrdrag@gmail.com>\n"
 "Language-Team: Polish (http://www.transifex.net/projects/p/fedora/language/"
 "pl/)\n"
@@ -851,7 +851,6 @@ msgid "Automounter map entry value attribute"
 msgstr "Atrybut wartości wpisu mapy automountera"
 
 #: src/config/SSSDConfig.py:290
-#, fuzzy
 msgid "Base DN for automounter map lookups"
 msgstr "Podstawowe DN dla wyszukiwań map automountera"
 
@@ -914,7 +913,7 @@ msgstr "Wyświetlanie dat z mikrosekundami"
 msgid "An open file descriptor for the debug logs"
 msgstr "Otwiera deskryptor pliku dla dzienników debugowania"
 
-#: src/providers/data_provider_be.c:1938
+#: src/providers/data_provider_be.c:2022
 msgid "Domain of the information provider (mandatory)"
 msgstr "Domena dostawcy informacji (wymagane)"
 
@@ -1015,9 +1014,8 @@ msgstr "Poziom debugowania, z jakim uruchomić"
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-#, fuzzy
 msgid "The SSSD domain to use"
-msgstr "Domeny SSSD do uruchomienia"
+msgstr "Domena SSSD do użycia"
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
@@ -1032,42 +1030,41 @@ msgstr "BÅ‚Ä…d podczas ustawiania lokalizacji\n"
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-#, fuzzy
 msgid "Not enough memory\n"
 msgstr "Brak pamięci\n"
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
 msgid "User not specified\n"
-msgstr ""
+msgstr "Nie podano użytkownika\n"
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
 msgid "Error looking up public keys\n"
-msgstr ""
+msgstr "BÅ‚Ä…d podczas wyszukiwania kluczy publicznych\n"
 
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
 msgid "Failed to open a socket\n"
-msgstr ""
+msgstr "Otwarcie gniazda się nie powiodło\n"
 
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
 msgid "Failed to connect to the server\n"
-msgstr ""
+msgstr "Połączenie z serwerem się nie powiodło\n"
 
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
 msgid "Failed to execute proxy command\n"
-msgstr ""
+msgstr "Wykonanie polecenia pośrednika się nie powiodło\n"
 
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
 msgid "The port to use to connect to the host"
-msgstr ""
+msgstr "Port do użycia do połączenia z komputerem"
 
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
 msgid "Host not specified\n"
-msgstr ""
+msgstr "Nie podano komputera\n"
 
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
 msgid "The path to the proxy command must be absolute\n"
-msgstr ""
+msgstr "Ścieżka do polecenia pośrednika musi być bezwzględna\n"
 
 #: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
 msgid "The UID of the user"
@@ -1474,49 +1471,48 @@ msgstr "Błąd transakcji. Nie można zmodyfikować użytkownika.\n"
 #: src/tools/sss_cache.c:132
 #, c-format
 msgid "Couldn't invalidate %s"
-msgstr ""
+msgstr "Nie można unieważnić %s"
 
 #: src/tools/sss_cache.c:138
 #, c-format
 msgid "Couldn't invalidate %s %s"
-msgstr ""
+msgstr "Nie można unieważnić %s %s"
 
 #: src/tools/sss_cache.c:262
 msgid "Invalidate particular user"
-msgstr ""
+msgstr "Unieważnia podanego użytkownika"
 
 #: src/tools/sss_cache.c:264
 msgid "Invalidate all users"
-msgstr ""
+msgstr "Unieważnia wszystkich użytkowników"
 
 #: src/tools/sss_cache.c:266
 msgid "Invalidate particular group"
-msgstr ""
+msgstr "Unieważnia podaną grupę"
 
 #: src/tools/sss_cache.c:268
 msgid "Invalidate all groups"
-msgstr ""
+msgstr "Unieważnia wszystkie grupy"
 
 #: src/tools/sss_cache.c:270
 msgid "Invalidate particular netgroup"
-msgstr ""
+msgstr "Unieważnia podaną grupę sieciową"
 
 #: src/tools/sss_cache.c:272
 msgid "Invalidate all netgroups"
-msgstr ""
+msgstr "Unieważnia wszystkie grupy sieciowe"
 
 #: src/tools/sss_cache.c:274
 msgid "Only invalidate entries from a particular domain"
-msgstr ""
+msgstr "Unieważnia wpisy tylko z podanej domeny"
 
 #: src/tools/sss_debuglevel.c:43
 msgid "\n"
-msgstr ""
+msgstr "\n"
 
 #: src/tools/sss_debuglevel.c:102
-#, fuzzy
 msgid "Specify debug level you want to set\n"
-msgstr "Poziom debugowania, z jakim uruchomić"
+msgstr "Podaje poziom debugowania do ustawienia\n"
 
 #: src/tools/tools_util.c:286
 msgid "Out of memory\n"
diff --git a/po/pt.po b/po/pt.po
index 04a034a6e..235802fcd 100644
--- a/po/pt.po
+++ b/po/pt.po
@@ -7,8 +7,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: SSSD\n"
 "Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2011-12-21 10:11+0000\n"
+"POT-Creation-Date: 2012-03-12 16:26-0400\n"
+"PO-Revision-Date: 2012-03-08 11:41+0000\n"
 "Last-Translator: sgallagh <sgallagh@redhat.com>\n"
 "Language-Team: Portuguese <trans-pt@lists.fedoraproject.org>\n"
 "Language: pt\n"
@@ -175,24 +175,20 @@ msgid "Password change provider"
 msgstr "Fornecedor de Alteração de Senha"
 
 #: src/config/SSSDConfig.py:88
-#, fuzzy
 msgid "SUDO provider"
-msgstr "Fornecedor de identidade"
+msgstr ""
 
 #: src/config/SSSDConfig.py:89
-#, fuzzy
 msgid "Autofs provider"
-msgstr "Fornecedor de autenticação"
+msgstr ""
 
 #: src/config/SSSDConfig.py:90
-#, fuzzy
 msgid "Session-loading provider"
-msgstr "Fornecedor de controle de acesso"
+msgstr ""
 
 #: src/config/SSSDConfig.py:91
-#, fuzzy
 msgid "Host identity provider"
-msgstr "Fornecedor de identidade"
+msgstr ""
 
 #: src/config/SSSDConfig.py:94
 msgid "Minimum user ID"
@@ -643,9 +639,8 @@ msgid "loginAllowedTimeMap attribute of NDS"
 msgstr ""
 
 #: src/config/SSSDConfig.py:226
-#, fuzzy
 msgid "SSH public key attribute"
-msgstr "Atributo da pasta pessoal"
+msgstr ""
 
 #: src/config/SSSDConfig.py:228
 msgid "Base DN for group lookups"
@@ -712,29 +707,24 @@ msgid "Modification time attribute for netgroups"
 msgstr ""
 
 #: src/config/SSSDConfig.py:249
-#, fuzzy
 msgid "Base DN for service lookups"
-msgstr "DN base para pesquisa de utilizadores"
+msgstr ""
 
 #: src/config/SSSDConfig.py:250
-#, fuzzy
 msgid "Objectclass for services"
-msgstr "Objectclass para utilizadores"
+msgstr ""
 
 #: src/config/SSSDConfig.py:251
-#, fuzzy
 msgid "Service name attribute"
-msgstr "Atributo do nome do utilizador"
+msgstr ""
 
 #: src/config/SSSDConfig.py:252
-#, fuzzy
 msgid "Service port attribute"
-msgstr "Atributo da pasta pessoal"
+msgstr ""
 
 #: src/config/SSSDConfig.py:253
-#, fuzzy
 msgid "Service protocol attribute"
-msgstr "Atributo da Shell"
+msgstr ""
 
 #: src/config/SSSDConfig.py:257
 msgid "Policy to evaluate the password expiration"
@@ -761,100 +751,84 @@ msgid "DNS service name for LDAP password change server"
 msgstr ""
 
 #: src/config/SSSDConfig.py:269
-#, fuzzy
 msgid "Base DN for sudo rules lookups"
-msgstr "DN base para pesquisa de utilizadores"
+msgstr ""
 
 #: src/config/SSSDConfig.py:270
 msgid "Enable periodical update of all sudo rules"
 msgstr ""
 
 #: src/config/SSSDConfig.py:271
-#, fuzzy
 msgid "Length of time between rules updates"
-msgstr "Período de tempo entre enumeração de actualizações"
+msgstr ""
 
 #: src/config/SSSDConfig.py:272
-#, fuzzy
 msgid "Object class for sudo rules"
-msgstr "Objectclass para utilizadores"
+msgstr ""
 
 #: src/config/SSSDConfig.py:273
 msgid "Sudo rule name"
 msgstr ""
 
 #: src/config/SSSDConfig.py:274
-#, fuzzy
 msgid "Sudo rule command attribute"
-msgstr "Atributo da pasta pessoal"
+msgstr ""
 
 #: src/config/SSSDConfig.py:275
-#, fuzzy
 msgid "Sudo rule host attribute"
-msgstr "Atributo da pasta pessoal"
+msgstr ""
 
 #: src/config/SSSDConfig.py:276
-#, fuzzy
 msgid "Sudo rule user attribute"
-msgstr "Atributo da pasta pessoal"
+msgstr ""
 
 #: src/config/SSSDConfig.py:277
-#, fuzzy
 msgid "Sudo rule option attribute"
-msgstr "Atributo da pasta pessoal"
+msgstr ""
 
 #: src/config/SSSDConfig.py:278
-#, fuzzy
 msgid "Sudo rule runasuser attribute"
-msgstr "Atributo do nome do utilizador"
+msgstr ""
 
 #: src/config/SSSDConfig.py:279
 msgid "Sudo rule runasgroup attribute"
 msgstr ""
 
 #: src/config/SSSDConfig.py:280
-#, fuzzy
 msgid "Sudo rule notbefore attribute"
-msgstr "Atributo da pasta pessoal"
+msgstr ""
 
 #: src/config/SSSDConfig.py:281
-#, fuzzy
 msgid "Sudo rule notafter attribute"
-msgstr "Atributo da pasta pessoal"
+msgstr ""
 
 #: src/config/SSSDConfig.py:282
-#, fuzzy
 msgid "Sudo rule order attribute"
-msgstr "Atributo da pasta pessoal"
+msgstr ""
 
 #: src/config/SSSDConfig.py:285
-#, fuzzy
 msgid "Object class for automounter maps"
-msgstr "Objectclass para utilizadores"
+msgstr ""
 
 #: src/config/SSSDConfig.py:286
-#, fuzzy
 msgid "Automounter map name attribute"
-msgstr "Atributo do nome do utilizador"
+msgstr ""
 
 #: src/config/SSSDConfig.py:287
-#, fuzzy
 msgid "Object class for automounter map entries"
-msgstr "Objectclass para utilizadores"
+msgstr ""
 
 #: src/config/SSSDConfig.py:288
-#, fuzzy
 msgid "Automounter map entry key attribute"
-msgstr "Atributo da pasta pessoal"
+msgstr ""
 
 #: src/config/SSSDConfig.py:289
 msgid "Automounter map entry value attribute"
 msgstr ""
 
 #: src/config/SSSDConfig.py:290
-#, fuzzy
 msgid "Base DN for automounter map lookups"
-msgstr "DN base para pesquisa de utilizadores"
+msgstr ""
 
 #: src/config/SSSDConfig.py:293
 msgid "Comma separated list of allowed users"
@@ -915,7 +889,7 @@ msgstr ""
 msgid "An open file descriptor for the debug logs"
 msgstr "Um descritor de ficheiro aberto para os registos de depuração"
 
-#: src/providers/data_provider_be.c:1938
+#: src/providers/data_provider_be.c:2022
 msgid "Domain of the information provider (mandatory)"
 msgstr "Domínio do fornecedor de informação (obrigatório)"
 
@@ -1016,9 +990,8 @@ msgstr "O nível de depuração a utilizar durante a execução"
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-#, fuzzy
 msgid "The SSSD domain to use"
-msgstr "Domínios SSSD a iniciar"
+msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
@@ -1033,9 +1006,8 @@ msgstr "Erro ao definir a configuração regional\n"
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-#, fuzzy
 msgid "Not enough memory\n"
-msgstr "Memória esgotada\n"
+msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
 msgid "User not specified\n"
@@ -1509,9 +1481,8 @@ msgid "\n"
 msgstr ""
 
 #: src/tools/sss_debuglevel.c:102
-#, fuzzy
 msgid "Specify debug level you want to set\n"
-msgstr "O nível de depuração a utilizar durante a execução"
+msgstr ""
 
 #: src/tools/tools_util.c:286
 msgid "Out of memory\n"
diff --git a/po/pt_BR.po b/po/pt_BR.po
deleted file mode 100644
index 2647252bc..000000000
--- a/po/pt_BR.po
+++ /dev/null
@@ -1,1462 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-11-30 04:10+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Portuguese (Brazilian) <trans-pt_br@lists.fedoraproject.org>\n"
-"Language: pt_BR\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n > 1)\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/ru.po b/po/ru.po
index 24383286e..bce9ea27f 100644
--- a/po/ru.po
+++ b/po/ru.po
@@ -7,8 +7,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: SSSD\n"
 "Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2011-12-21 10:11+0000\n"
+"POT-Creation-Date: 2012-03-12 16:26-0400\n"
+"PO-Revision-Date: 2012-03-08 11:41+0000\n"
 "Last-Translator: sgallagh <sgallagh@redhat.com>\n"
 "Language-Team: Russian <trans-ru@lists.fedoraproject.org>\n"
 "Language: ru\n"
@@ -175,24 +175,20 @@ msgid "Password change provider"
 msgstr "По�тавщик операции �мены парол�"
 
 #: src/config/SSSDConfig.py:88
-#, fuzzy
 msgid "SUDO provider"
-msgstr "По�тавщик данных дл� идентификации"
+msgstr ""
 
 #: src/config/SSSDConfig.py:89
-#, fuzzy
 msgid "Autofs provider"
-msgstr "По�тавщик данных дл� проверки подлинно�ти"
+msgstr ""
 
 #: src/config/SSSDConfig.py:90
-#, fuzzy
 msgid "Session-loading provider"
-msgstr "По�тавщик данных дл� контрол� до�тупа"
+msgstr ""
 
 #: src/config/SSSDConfig.py:91
-#, fuzzy
 msgid "Host identity provider"
-msgstr "По�тавщик данных дл� идентификации"
+msgstr ""
 
 #: src/config/SSSDConfig.py:94
 msgid "Minimum user ID"
@@ -643,9 +639,8 @@ msgid "loginAllowedTimeMap attribute of NDS"
 msgstr ""
 
 #: src/config/SSSDConfig.py:226
-#, fuzzy
 msgid "SSH public key attribute"
-msgstr "�трибут домашнего каталога"
+msgstr ""
 
 #: src/config/SSSDConfig.py:228
 msgid "Base DN for group lookups"
@@ -712,29 +707,24 @@ msgid "Modification time attribute for netgroups"
 msgstr ""
 
 #: src/config/SSSDConfig.py:249
-#, fuzzy
 msgid "Base DN for service lookups"
-msgstr "Base DN дл� пои�ка"
+msgstr ""
 
 #: src/config/SSSDConfig.py:250
-#, fuzzy
 msgid "Objectclass for services"
-msgstr "Objectclass дл� пользователей"
+msgstr ""
 
 #: src/config/SSSDConfig.py:251
-#, fuzzy
 msgid "Service name attribute"
-msgstr "�трибут «username»"
+msgstr ""
 
 #: src/config/SSSDConfig.py:252
-#, fuzzy
 msgid "Service port attribute"
-msgstr "�трибут домашнего каталога"
+msgstr ""
 
 #: src/config/SSSDConfig.py:253
-#, fuzzy
 msgid "Service protocol attribute"
-msgstr "�трибут оболочки"
+msgstr ""
 
 #: src/config/SSSDConfig.py:257
 msgid "Policy to evaluate the password expiration"
@@ -761,100 +751,84 @@ msgid "DNS service name for LDAP password change server"
 msgstr ""
 
 #: src/config/SSSDConfig.py:269
-#, fuzzy
 msgid "Base DN for sudo rules lookups"
-msgstr "Base DN дл� пои�ка"
+msgstr ""
 
 #: src/config/SSSDConfig.py:270
 msgid "Enable periodical update of all sudo rules"
 msgstr ""
 
 #: src/config/SSSDConfig.py:271
-#, fuzzy
 msgid "Length of time between rules updates"
-msgstr "Временной интервал между обновлени�ми перечи�лени�"
+msgstr ""
 
 #: src/config/SSSDConfig.py:272
-#, fuzzy
 msgid "Object class for sudo rules"
-msgstr "Objectclass дл� пользователей"
+msgstr ""
 
 #: src/config/SSSDConfig.py:273
 msgid "Sudo rule name"
 msgstr ""
 
 #: src/config/SSSDConfig.py:274
-#, fuzzy
 msgid "Sudo rule command attribute"
-msgstr "�трибут домашнего каталога"
+msgstr ""
 
 #: src/config/SSSDConfig.py:275
-#, fuzzy
 msgid "Sudo rule host attribute"
-msgstr "�трибут домашнего каталога"
+msgstr ""
 
 #: src/config/SSSDConfig.py:276
-#, fuzzy
 msgid "Sudo rule user attribute"
-msgstr "�трибут домашнего каталога"
+msgstr ""
 
 #: src/config/SSSDConfig.py:277
-#, fuzzy
 msgid "Sudo rule option attribute"
-msgstr "�трибут домашнего каталога"
+msgstr ""
 
 #: src/config/SSSDConfig.py:278
-#, fuzzy
 msgid "Sudo rule runasuser attribute"
-msgstr "�трибут «username»"
+msgstr ""
 
 #: src/config/SSSDConfig.py:279
 msgid "Sudo rule runasgroup attribute"
 msgstr ""
 
 #: src/config/SSSDConfig.py:280
-#, fuzzy
 msgid "Sudo rule notbefore attribute"
-msgstr "�трибут домашнего каталога"
+msgstr ""
 
 #: src/config/SSSDConfig.py:281
-#, fuzzy
 msgid "Sudo rule notafter attribute"
-msgstr "�трибут домашнего каталога"
+msgstr ""
 
 #: src/config/SSSDConfig.py:282
-#, fuzzy
 msgid "Sudo rule order attribute"
-msgstr "�трибут домашнего каталога"
+msgstr ""
 
 #: src/config/SSSDConfig.py:285
-#, fuzzy
 msgid "Object class for automounter maps"
-msgstr "Objectclass дл� пользователей"
+msgstr ""
 
 #: src/config/SSSDConfig.py:286
-#, fuzzy
 msgid "Automounter map name attribute"
-msgstr "�трибут «username»"
+msgstr ""
 
 #: src/config/SSSDConfig.py:287
-#, fuzzy
 msgid "Object class for automounter map entries"
-msgstr "Objectclass дл� пользователей"
+msgstr ""
 
 #: src/config/SSSDConfig.py:288
-#, fuzzy
 msgid "Automounter map entry key attribute"
-msgstr "�трибут домашнего каталога"
+msgstr ""
 
 #: src/config/SSSDConfig.py:289
 msgid "Automounter map entry value attribute"
 msgstr ""
 
 #: src/config/SSSDConfig.py:290
-#, fuzzy
 msgid "Base DN for automounter map lookups"
-msgstr "Base DN дл� пои�ка"
+msgstr ""
 
 #: src/config/SSSDConfig.py:293
 msgid "Comma separated list of allowed users"
@@ -915,7 +889,7 @@ msgstr ""
 msgid "An open file descriptor for the debug logs"
 msgstr "Открытый де�криптор файла дл� журналов отладки"
 
-#: src/providers/data_provider_be.c:1938
+#: src/providers/data_provider_be.c:2022
 msgid "Domain of the information provider (mandatory)"
 msgstr "Домен по�тавщика информации (об�зательный)"
 
@@ -1016,9 +990,8 @@ msgstr "Уровень отладки дл� запу�ка"
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-#, fuzzy
 msgid "The SSSD domain to use"
-msgstr "SSSD домены дл� запу�ка"
+msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
@@ -1033,9 +1006,8 @@ msgstr ""
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-#, fuzzy
 msgid "Not enough memory\n"
-msgstr "�едо�таточно пам�ти\n"
+msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
 msgid "User not specified\n"
@@ -1503,9 +1475,8 @@ msgid "\n"
 msgstr ""
 
 #: src/tools/sss_debuglevel.c:102
-#, fuzzy
 msgid "Specify debug level you want to set\n"
-msgstr "Уровень отладки дл� запу�ка"
+msgstr ""
 
 #: src/tools/tools_util.c:286
 msgid "Out of memory\n"
diff --git a/po/sk.po b/po/sk.po
deleted file mode 100644
index 1374fd597..000000000
--- a/po/sk.po
+++ /dev/null
@@ -1,1462 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-11-30 04:10+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Slovak (http://www.transifex.net/projects/p/fedora/team/sk/)\n"
-"Language: sk\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=3; plural=(n==1) ? 0 : (n>=2 && n<=4) ? 1 : 2\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/sq.po b/po/sq.po
deleted file mode 100644
index 291af9dd8..000000000
--- a/po/sq.po
+++ /dev/null
@@ -1,1463 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-11-30 04:10+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Albanian (http://www.transifex.net/projects/p/fedora/team/"
-"sq/)\n"
-"Language: sq\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/sr.po b/po/sr.po
deleted file mode 100644
index 52a729041..000000000
--- a/po/sr.po
+++ /dev/null
@@ -1,1463 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-11-30 04:10+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Serbian <trans-sr@lists.fedoraproject.org>\n"
-"Language: sr\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
-"%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2)\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/sssd.pot b/po/sssd.pot
index 60d971131..cc1ea52a8 100644
--- a/po/sssd.pot
+++ b/po/sssd.pot
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
+"POT-Creation-Date: 2012-03-12 16:26-0400\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -878,7 +878,7 @@ msgstr ""
 msgid "An open file descriptor for the debug logs"
 msgstr ""
 
-#: src/providers/data_provider_be.c:1938
+#: src/providers/data_provider_be.c:2022
 msgid "Domain of the information provider (mandatory)"
 msgstr ""
 
diff --git a/po/sv.po b/po/sv.po
index ebd0b39c7..86049d51d 100644
--- a/po/sv.po
+++ b/po/sv.po
@@ -7,10 +7,10 @@ msgid ""
 msgstr ""
 "Project-Id-Version: SSSD\n"
 "Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2011-12-21 10:11+0000\n"
+"POT-Creation-Date: 2012-03-12 16:26-0400\n"
+"PO-Revision-Date: 2012-03-08 11:41+0000\n"
 "Last-Translator: sgallagh <sgallagh@redhat.com>\n"
-"Language-Team: Swedish (http://www.transifex.net/projects/p/fedora/team/"
+"Language-Team: Swedish (http://www.transifex.net/projects/p/fedora/language/"
 "sv/)\n"
 "Language: sv\n"
 "MIME-Version: 1.0\n"
@@ -172,24 +172,20 @@ msgid "Password change provider"
 msgstr "Leverantör av lösenordsändringar"
 
 #: src/config/SSSDConfig.py:88
-#, fuzzy
 msgid "SUDO provider"
-msgstr "Identifiera leverantör"
+msgstr ""
 
 #: src/config/SSSDConfig.py:89
-#, fuzzy
 msgid "Autofs provider"
-msgstr "Autentiseringsleverantör"
+msgstr ""
 
 #: src/config/SSSDConfig.py:90
-#, fuzzy
 msgid "Session-loading provider"
-msgstr "Leverantör av åtkomstkontroll"
+msgstr ""
 
 #: src/config/SSSDConfig.py:91
-#, fuzzy
 msgid "Host identity provider"
-msgstr "Identifiera leverantör"
+msgstr ""
 
 #: src/config/SSSDConfig.py:94
 msgid "Minimum user ID"
@@ -634,9 +630,8 @@ msgid "loginAllowedTimeMap attribute of NDS"
 msgstr ""
 
 #: src/config/SSSDConfig.py:226
-#, fuzzy
 msgid "SSH public key attribute"
-msgstr "Hemkatalogattribut"
+msgstr ""
 
 #: src/config/SSSDConfig.py:228
 msgid "Base DN for group lookups"
@@ -703,29 +698,24 @@ msgid "Modification time attribute for netgroups"
 msgstr ""
 
 #: src/config/SSSDConfig.py:249
-#, fuzzy
 msgid "Base DN for service lookups"
-msgstr "Bas-DN för användaruppslagningar"
+msgstr ""
 
 #: src/config/SSSDConfig.py:250
-#, fuzzy
 msgid "Objectclass for services"
-msgstr "Objektklass för användare"
+msgstr ""
 
 #: src/config/SSSDConfig.py:251
-#, fuzzy
 msgid "Service name attribute"
-msgstr "Användarnamnsattribut"
+msgstr ""
 
 #: src/config/SSSDConfig.py:252
-#, fuzzy
 msgid "Service port attribute"
-msgstr "Hemkatalogattribut"
+msgstr ""
 
 #: src/config/SSSDConfig.py:253
-#, fuzzy
 msgid "Service protocol attribute"
-msgstr "Skalattribut"
+msgstr ""
 
 #: src/config/SSSDConfig.py:257
 msgid "Policy to evaluate the password expiration"
@@ -752,100 +742,84 @@ msgid "DNS service name for LDAP password change server"
 msgstr ""
 
 #: src/config/SSSDConfig.py:269
-#, fuzzy
 msgid "Base DN for sudo rules lookups"
-msgstr "Bas-DN för användaruppslagningar"
+msgstr ""
 
 #: src/config/SSSDConfig.py:270
 msgid "Enable periodical update of all sudo rules"
 msgstr ""
 
 #: src/config/SSSDConfig.py:271
-#, fuzzy
 msgid "Length of time between rules updates"
-msgstr "Tidslängd mellan uppräkningsuppdateringar"
+msgstr ""
 
 #: src/config/SSSDConfig.py:272
-#, fuzzy
 msgid "Object class for sudo rules"
-msgstr "Objektklass för användare"
+msgstr ""
 
 #: src/config/SSSDConfig.py:273
 msgid "Sudo rule name"
 msgstr ""
 
 #: src/config/SSSDConfig.py:274
-#, fuzzy
 msgid "Sudo rule command attribute"
-msgstr "Hemkatalogattribut"
+msgstr ""
 
 #: src/config/SSSDConfig.py:275
-#, fuzzy
 msgid "Sudo rule host attribute"
-msgstr "Hemkatalogattribut"
+msgstr ""
 
 #: src/config/SSSDConfig.py:276
-#, fuzzy
 msgid "Sudo rule user attribute"
-msgstr "Hemkatalogattribut"
+msgstr ""
 
 #: src/config/SSSDConfig.py:277
-#, fuzzy
 msgid "Sudo rule option attribute"
-msgstr "Hemkatalogattribut"
+msgstr ""
 
 #: src/config/SSSDConfig.py:278
-#, fuzzy
 msgid "Sudo rule runasuser attribute"
-msgstr "Användarnamnsattribut"
+msgstr ""
 
 #: src/config/SSSDConfig.py:279
 msgid "Sudo rule runasgroup attribute"
 msgstr ""
 
 #: src/config/SSSDConfig.py:280
-#, fuzzy
 msgid "Sudo rule notbefore attribute"
-msgstr "Hemkatalogattribut"
+msgstr ""
 
 #: src/config/SSSDConfig.py:281
-#, fuzzy
 msgid "Sudo rule notafter attribute"
-msgstr "Hemkatalogattribut"
+msgstr ""
 
 #: src/config/SSSDConfig.py:282
-#, fuzzy
 msgid "Sudo rule order attribute"
-msgstr "Hemkatalogattribut"
+msgstr ""
 
 #: src/config/SSSDConfig.py:285
-#, fuzzy
 msgid "Object class for automounter maps"
-msgstr "Objektklass för användare"
+msgstr ""
 
 #: src/config/SSSDConfig.py:286
-#, fuzzy
 msgid "Automounter map name attribute"
-msgstr "Användarnamnsattribut"
+msgstr ""
 
 #: src/config/SSSDConfig.py:287
-#, fuzzy
 msgid "Object class for automounter map entries"
-msgstr "Objektklass för användare"
+msgstr ""
 
 #: src/config/SSSDConfig.py:288
-#, fuzzy
 msgid "Automounter map entry key attribute"
-msgstr "Hemkatalogattribut"
+msgstr ""
 
 #: src/config/SSSDConfig.py:289
 msgid "Automounter map entry value attribute"
 msgstr ""
 
 #: src/config/SSSDConfig.py:290
-#, fuzzy
 msgid "Base DN for automounter map lookups"
-msgstr "Bas-DN för användaruppslagningar"
+msgstr ""
 
 #: src/config/SSSDConfig.py:293
 msgid "Comma separated list of allowed users"
@@ -906,7 +880,7 @@ msgstr ""
 msgid "An open file descriptor for the debug logs"
 msgstr ""
 
-#: src/providers/data_provider_be.c:1938
+#: src/providers/data_provider_be.c:2022
 msgid "Domain of the information provider (mandatory)"
 msgstr ""
 
@@ -1007,9 +981,8 @@ msgstr "Felsökningsnivå att köra med"
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-#, fuzzy
 msgid "The SSSD domain to use"
-msgstr "SSSD-domäner att starta"
+msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
@@ -1024,9 +997,8 @@ msgstr "Fel när lokalen sattes\n"
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-#, fuzzy
 msgid "Not enough memory\n"
-msgstr "Slut på minne\n"
+msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
 msgid "User not specified\n"
@@ -1492,9 +1464,8 @@ msgid "\n"
 msgstr ""
 
 #: src/tools/sss_debuglevel.c:102
-#, fuzzy
 msgid "Specify debug level you want to set\n"
-msgstr "Felsökningsnivå att köra med"
+msgstr ""
 
 #: src/tools/tools_util.c:286
 msgid "Out of memory\n"
diff --git a/po/ta.po b/po/ta.po
deleted file mode 100644
index 67efb549a..000000000
--- a/po/ta.po
+++ /dev/null
@@ -1,1462 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-11-30 04:10+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Tamil <tamil-users@lists.fedoraproject.org>\n"
-"Language: ta\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/tg.po b/po/tg.po
index 3832264fa..913d49ff8 100644
--- a/po/tg.po
+++ b/po/tg.po
@@ -7,8 +7,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: SSSD\n"
 "Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2012-02-14 12:55+0000\n"
+"POT-Creation-Date: 2012-03-12 16:26-0400\n"
+"PO-Revision-Date: 2012-03-08 11:42+0000\n"
 "Last-Translator: sgallagh <sgallagh@redhat.com>\n"
 "Language-Team: Tajik (http://www.transifex.net/projects/p/fedora/language/"
 "tg/)\n"
@@ -879,7 +879,7 @@ msgstr ""
 msgid "An open file descriptor for the debug logs"
 msgstr ""
 
-#: src/providers/data_provider_be.c:1938
+#: src/providers/data_provider_be.c:2022
 msgid "Domain of the information provider (mandatory)"
 msgstr ""
 
@@ -996,9 +996,8 @@ msgstr ""
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-#, fuzzy
 msgid "Not enough memory\n"
-msgstr "Берун аз хотира\n"
+msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
 msgid "User not specified\n"
diff --git a/po/tr.po b/po/tr.po
deleted file mode 100644
index b2c519f3b..000000000
--- a/po/tr.po
+++ /dev/null
@@ -1,1463 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-11-30 04:10+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Turkish (http://www.transifex.net/projects/p/fedora/team/"
-"tr/)\n"
-"Language: tr\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=1; plural=0\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/uk.po b/po/uk.po
index 360310284..d0afe03b4 100644
--- a/po/uk.po
+++ b/po/uk.po
@@ -4,13 +4,13 @@
 #
 # Translators:
 # sgallagh <sgallagh@redhat.com>, 2011.
-# Yuri Chornoivan <yurchor@ukr.net>, 2011.
+# Yuri Chornoivan <yurchor@ukr.net>, 2011, 2012.
 msgid ""
 msgstr ""
 "Project-Id-Version: SSSD\n"
 "Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2011-12-21 10:11+0000\n"
+"POT-Creation-Date: 2012-03-12 16:26-0400\n"
+"PO-Revision-Date: 2012-03-08 11:41+0000\n"
 "Last-Translator: Yuri Chornoivan <yurchor@ukr.net>\n"
 "Language-Team: Ukrainian <trans-uk@lists.fedoraproject.org>\n"
 "Language: uk\n"
@@ -164,14 +164,15 @@ msgstr ""
 #: src/config/SSSDConfig.py:77
 msgid "Whether to evaluate the time-based attributes in sudo rules"
 msgstr ""
+"Визначає, чи �лід обробл�ти атрибути правил sudo, пов’�зані з ча�овими "
+"обмеженн�ми"
 
 #: src/config/SSSDConfig.py:78
-#, fuzzy
 msgid ""
 "How many seconds to keep sudorules cached before asking the provider again"
 msgstr ""
-"Тривалі�ть (у �екундах) зберіганн� даних щодо розпізнаванн� у кеші дл� "
-"запитів PAM"
+"Тривалі�ть зберіганн� правил sudo у кеші. Щойно �плине цей проміжок ча�у, "
+"запит до �лужби буде наді�лано знову."
 
 #: src/config/SSSDConfig.py:84
 msgid "Identity provider"
@@ -190,24 +191,20 @@ msgid "Password change provider"
 msgstr "Служба зміни паролів"
 
 #: src/config/SSSDConfig.py:88
-#, fuzzy
 msgid "SUDO provider"
-msgstr "Служба профілів"
+msgstr "Служба SUDO"
 
 #: src/config/SSSDConfig.py:89
-#, fuzzy
 msgid "Autofs provider"
-msgstr "Служба розпізнаванн�"
+msgstr "Служба автоматизації файлових �и�тем"
 
 #: src/config/SSSDConfig.py:90
-#, fuzzy
 msgid "Session-loading provider"
-msgstr "Служба керуванн� до�тупом"
+msgstr "Служба завантаженн� �еан�ів"
 
 #: src/config/SSSDConfig.py:91
-#, fuzzy
 msgid "Host identity provider"
-msgstr "Служба профілів"
+msgstr "Служба профілів вузлів"
 
 #: src/config/SSSDConfig.py:94
 msgid "Minimum user ID"
@@ -316,7 +313,7 @@ msgstr ""
 
 #: src/config/SSSDConfig.py:123
 msgid "The automounter location this IPA client is using"
-msgstr ""
+msgstr "�дре�а автоматичного монтуванн�, �ку викори�товує цей клієнт IPA"
 
 #: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
 msgid "Kerberos server address"
@@ -519,7 +516,7 @@ msgstr "ТриваліÑ�Ñ‚ÑŒ підтримуваннÑ� з’єднаннÑ� з Ñ
 
 #: src/config/SSSDConfig.py:183
 msgid "Disable the LDAP paging control"
-msgstr ""
+msgstr "Вимкнути контроль �торінок у LDAP"
 
 #: src/config/SSSDConfig.py:186
 msgid "Length of time to wait for a search request"
@@ -675,9 +672,8 @@ msgid "loginAllowedTimeMap attribute of NDS"
 msgstr "�трибут loginAllowedTimeMap NDS"
 
 #: src/config/SSSDConfig.py:226
-#, fuzzy
 msgid "SSH public key attribute"
-msgstr "�трибут домашнього каталогу"
+msgstr "�трибут відкритого ключа SSH"
 
 #: src/config/SSSDConfig.py:228
 msgid "Base DN for group lookups"
@@ -744,29 +740,24 @@ msgid "Modification time attribute for netgroups"
 msgstr "�трибут ча�у зміни дл� мережевих груп"
 
 #: src/config/SSSDConfig.py:249
-#, fuzzy
 msgid "Base DN for service lookups"
-msgstr "Базова назва домену дл� пошуків кори�тувачів"
+msgstr "Базова �ервер назв домену дл� пошуку �лужб"
 
 #: src/config/SSSDConfig.py:250
-#, fuzzy
 msgid "Objectclass for services"
-msgstr "Кла� об’єктів дл� кори�тувачів"
+msgstr "Кла� об’єктів дл� �лужб"
 
 #: src/config/SSSDConfig.py:251
-#, fuzzy
 msgid "Service name attribute"
-msgstr "�трибут імені кори�тувача"
+msgstr "�трибут назви �лужби"
 
 #: src/config/SSSDConfig.py:252
-#, fuzzy
 msgid "Service port attribute"
-msgstr "�трибут домашнього каталогу"
+msgstr "�трибут порту �лужби"
 
 #: src/config/SSSDConfig.py:253
-#, fuzzy
 msgid "Service protocol attribute"
-msgstr "�трибут оболонки"
+msgstr "�трибут протоколу �лужби"
 
 #: src/config/SSSDConfig.py:257
 msgid "Policy to evaluate the password expiration"
@@ -795,102 +786,85 @@ msgid "DNS service name for LDAP password change server"
 msgstr "�азва у �лужбі DNS �ервера зміни паролів LDAP"
 
 #: src/config/SSSDConfig.py:269
-#, fuzzy
 msgid "Base DN for sudo rules lookups"
-msgstr "Базова назва домену дл� пошуків кори�тувачів"
+msgstr "Базова назва домену дл� пошуків правил sudo"
 
 #: src/config/SSSDConfig.py:270
 msgid "Enable periodical update of all sudo rules"
-msgstr ""
+msgstr "Увімкнути періодичні оновленн� в�іх правил sudo"
 
 #: src/config/SSSDConfig.py:271
-#, fuzzy
 msgid "Length of time between rules updates"
-msgstr "Проміжок ча�у між оновленн�ми нумерації"
+msgstr "Проміжок ча�у між оновленн�ми правил"
 
 #: src/config/SSSDConfig.py:272
-#, fuzzy
 msgid "Object class for sudo rules"
-msgstr "Кла� об’єктів дл� кори�тувачів"
+msgstr "Кла� об’єктів дл� правил sudo"
 
 #: src/config/SSSDConfig.py:273
 msgid "Sudo rule name"
-msgstr ""
+msgstr "�азва правила sudo"
 
 #: src/config/SSSDConfig.py:274
-#, fuzzy
 msgid "Sudo rule command attribute"
-msgstr "�трибут домашнього каталогу"
+msgstr "�трибут команди правила sudo"
 
 #: src/config/SSSDConfig.py:275
-#, fuzzy
 msgid "Sudo rule host attribute"
-msgstr "�трибут lastUSN"
+msgstr "�трибут вузла правила sudo"
 
 #: src/config/SSSDConfig.py:276
-#, fuzzy
 msgid "Sudo rule user attribute"
-msgstr "�трибут член�тва у групі"
+msgstr "�трибут кори�тувача правила sudo"
 
 #: src/config/SSSDConfig.py:277
-#, fuzzy
 msgid "Sudo rule option attribute"
-msgstr "�трибут домашнього каталогу"
+msgstr "�трибут параметрів правила sudo"
 
 #: src/config/SSSDConfig.py:278
-#, fuzzy
 msgid "Sudo rule runasuser attribute"
-msgstr "�трибут імені кори�тувача"
+msgstr ""
+"�трибут кори�тувача, від імені �кого виконуватиметь�� запу�к, правила sudo"
 
 #: src/config/SSSDConfig.py:279
-#, fuzzy
 msgid "Sudo rule runasgroup attribute"
-msgstr "�трибут UUID груп у мережі"
+msgstr "�трибут групи, від імені �кої виконуватиметь�� запу�к, правила sudo"
 
 #: src/config/SSSDConfig.py:280
-#, fuzzy
 msgid "Sudo rule notbefore attribute"
-msgstr "�трибут домашнього каталогу"
+msgstr "�трибут граничного ча�у початку дії правила sudo"
 
 #: src/config/SSSDConfig.py:281
-#, fuzzy
 msgid "Sudo rule notafter attribute"
-msgstr "�трибут домашнього каталогу"
+msgstr "�трибут граничного ча�у завершенн� дії правила sudo"
 
 #: src/config/SSSDConfig.py:282
-#, fuzzy
 msgid "Sudo rule order attribute"
-msgstr "�трибут домашнього каталогу"
+msgstr "�трибут пор�дку правила sudo"
 
 #: src/config/SSSDConfig.py:285
-#, fuzzy
 msgid "Object class for automounter maps"
-msgstr "Кла� об’єктів дл� кори�тувачів"
+msgstr "Кла� об’єктів дл� карт автоматичного монтуванн�"
 
 #: src/config/SSSDConfig.py:286
-#, fuzzy
 msgid "Automounter map name attribute"
-msgstr "�трибут імені кори�тувача"
+msgstr "�трибут назви карти автоматичного монтуванн�"
 
 #: src/config/SSSDConfig.py:287
-#, fuzzy
 msgid "Object class for automounter map entries"
-msgstr "Кла� об’єктів дл� кори�тувачів"
+msgstr "Кла� об’єктів дл� запи�ів карт автоматичного монтуванн�"
 
 #: src/config/SSSDConfig.py:288
-#, fuzzy
 msgid "Automounter map entry key attribute"
-msgstr "�трибут домашнього каталогу"
+msgstr "�трибут ключа запи�у карти автоматичного монтуванн�"
 
 #: src/config/SSSDConfig.py:289
-#, fuzzy
 msgid "Automounter map entry value attribute"
-msgstr "�трибут трійки груп у мережі"
+msgstr "�трибут значенн� запи�у карти автоматичного монтуванн�"
 
 #: src/config/SSSDConfig.py:290
-#, fuzzy
 msgid "Base DN for automounter map lookups"
-msgstr "Базова назва домену дл� пошуків кори�тувачів"
+msgstr "Базовий �ервер назв домену дл� пошуків карти автоматичного монтуванн�"
 
 #: src/config/SSSDConfig.py:293
 msgid "Comma separated list of allowed users"
@@ -951,7 +925,7 @@ msgstr "Показувати мікро�екунди у ча�ових позн
 msgid "An open file descriptor for the debug logs"
 msgstr "Де�криптор відкритого файла дл� запи�у журналів діагно�тики"
 
-#: src/providers/data_provider_be.c:1938
+#: src/providers/data_provider_be.c:2022
 msgid "Domain of the information provider (mandatory)"
 msgstr "Домен наданн� відомо�тей (обов’�зковий)"
 
@@ -1052,9 +1026,8 @@ msgstr "Рівень діагно�тики під ча� запу�ку"
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-#, fuzzy
 msgid "The SSSD domain to use"
-msgstr "Домени SSSD, �кі �лід запу�тити"
+msgstr "Домен SSSD, �кий �лід викори�товувати"
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
@@ -1069,42 +1042,41 @@ msgstr "Помилка під чаÑ� Ñ�проби вÑ�тановити локаÐ
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-#, fuzzy
 msgid "Not enough memory\n"
-msgstr "�е ви�тачає пам'�ті\n"
+msgstr "�едо�татньо пам’�ті\n"
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
 msgid "User not specified\n"
-msgstr ""
+msgstr "�е вказано кори�тувача\n"
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
 msgid "Error looking up public keys\n"
-msgstr ""
+msgstr "Помилка під ча� �проби пошуку відкритих ключів\n"
 
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
 msgid "Failed to open a socket\n"
-msgstr ""
+msgstr "�е вдало�� відкрити �окет\n"
 
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
 msgid "Failed to connect to the server\n"
-msgstr ""
+msgstr "�е вдало�� в�тановити з’єднанн� з �ервером\n"
 
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
 msgid "Failed to execute proxy command\n"
-msgstr ""
+msgstr "�е вдало�� виконати команду прок�і-�ервера\n"
 
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
 msgid "The port to use to connect to the host"
-msgstr ""
+msgstr "Порт, �ким �лід кори�тувати�� дл� в�тановленн� з’єднань з вузлом"
 
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
 msgid "Host not specified\n"
-msgstr ""
+msgstr "�е вказано вузол\n"
 
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
 msgid "The path to the proxy command must be absolute\n"
-msgstr ""
+msgstr "Має бути вказано аб�олютний шл�х до команди прок�і-�ервера\n"
 
 #: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
 msgid "The UID of the user"
@@ -1514,49 +1486,48 @@ msgstr ""
 #: src/tools/sss_cache.c:132
 #, c-format
 msgid "Couldn't invalidate %s"
-msgstr ""
+msgstr "�е вдало�� �ка�увати визначенн� %s"
 
 #: src/tools/sss_cache.c:138
 #, c-format
 msgid "Couldn't invalidate %s %s"
-msgstr ""
+msgstr "�е вдало�� �ка�увати визначенн� %s %s"
 
 #: src/tools/sss_cache.c:262
 msgid "Invalidate particular user"
-msgstr ""
+msgstr "Ска�увати визначенн� певного кори�тувача"
 
 #: src/tools/sss_cache.c:264
 msgid "Invalidate all users"
-msgstr ""
+msgstr "Ска�увати визначенн� в�іх кори�тувачів"
 
 #: src/tools/sss_cache.c:266
 msgid "Invalidate particular group"
-msgstr ""
+msgstr "Ска�увати визначенн� певної групи"
 
 #: src/tools/sss_cache.c:268
 msgid "Invalidate all groups"
-msgstr ""
+msgstr "Ска�увати визначенн� в�іх груп"
 
 #: src/tools/sss_cache.c:270
 msgid "Invalidate particular netgroup"
-msgstr ""
+msgstr "Ска�увати визначенн� певної мережевої групи"
 
 #: src/tools/sss_cache.c:272
 msgid "Invalidate all netgroups"
-msgstr ""
+msgstr "Ска�увати визначенн� в�іх мережевих груп"
 
 #: src/tools/sss_cache.c:274
 msgid "Only invalidate entries from a particular domain"
-msgstr ""
+msgstr "Ска�увати визначенн� лише запи�ів з певного домену"
 
 #: src/tools/sss_debuglevel.c:43
 msgid "\n"
-msgstr ""
+msgstr "\n"
 
 #: src/tools/sss_debuglevel.c:102
-#, fuzzy
 msgid "Specify debug level you want to set\n"
-msgstr "Рівень діагно�тики під ча� запу�ку"
+msgstr "Вкажіть рівень діагно�тики, �кий ви бажаєте в�тановити\n"
 
 #: src/tools/tools_util.c:286
 msgid "Out of memory\n"
diff --git a/po/vi.po b/po/vi.po
deleted file mode 100644
index 1035ca1a5..000000000
--- a/po/vi.po
+++ /dev/null
@@ -1,1463 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-11-30 04:10+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Vietnamese (http://www.transifex.net/projects/p/fedora/team/"
-"vi/)\n"
-"Language: vi\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=1; plural=0\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/zh_CN.po b/po/zh_CN.po
deleted file mode 100644
index 2891f80fe..000000000
--- a/po/zh_CN.po
+++ /dev/null
@@ -1,1463 +0,0 @@
-# SOME DESCRIPTIVE TITLE.
-# Copyright (C) YEAR Red Hat, Inc.
-# This file is distributed under the same license as the PACKAGE package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-11-30 04:10+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Chinese (China) (http://www.transifex.net/projects/p/fedora/"
-"team/zh_CN/)\n"
-"Language: zh_CN\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=1; plural=0\n"
-
-#: src/config/SSSDConfig.py:39
-msgid "Set the verbosity of the debug logging"
-msgstr ""
-
-#: src/config/SSSDConfig.py:40
-msgid "Include timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:41
-msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
-
-#: src/config/SSSDConfig.py:42
-msgid "Write debug messages to logfiles"
-msgstr ""
-
-#: src/config/SSSDConfig.py:43
-msgid "Ping timeout before restarting service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:44
-msgid "Command to start service"
-msgstr ""
-
-#: src/config/SSSDConfig.py:45
-msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
-
-#: src/config/SSSDConfig.py:48
-msgid "SSSD Services to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:49
-msgid "SSSD Domains to start"
-msgstr ""
-
-#: src/config/SSSDConfig.py:50
-msgid "Timeout for messages sent over the SBUS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:51
-msgid "Regex to parse username and domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:52
-msgid "Printf-compatible format for displaying fully-qualified names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:53
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#: src/config/SSSDConfig.py:56
-msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:57
-msgid "Entry cache background update timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:58 src/config/SSSDConfig.py:81
-msgid "Negative cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:59
-msgid "Users that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:60
-msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
-
-#: src/config/SSSDConfig.py:61
-msgid "Should filtered users appear in groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:62
-msgid "The value of the password field the NSS provider should return"
-msgstr ""
-
-#: src/config/SSSDConfig.py:63
-msgid "Override homedir value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:64
-msgid "The list of shells users are allowed to log in with"
-msgstr ""
-
-#: src/config/SSSDConfig.py:65
-msgid ""
-"The list of shells that will be vetoed, and replaced with the fallback shell"
-msgstr ""
-
-#: src/config/SSSDConfig.py:66
-msgid ""
-"If a shell stored in central directory is allowed but not available, use "
-"this fallback"
-msgstr ""
-
-#: src/config/SSSDConfig.py:69
-msgid "How long to allow cached logins between online logins (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:70
-msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:71
-msgid ""
-"How long (minutes) to deny login after offline_failed_login_attempts has "
-"been reached"
-msgstr ""
-
-#: src/config/SSSDConfig.py:72
-msgid "What kind of messages are displayed to the user during authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:73
-msgid "How many seconds to keep identity information cached for PAM requests"
-msgstr ""
-
-#: src/config/SSSDConfig.py:74
-msgid "How many days before password expiration a warning should be displayed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:77
-msgid "Whether to evaluate the time-based attributes in sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:78
-msgid ""
-"How many seconds to keep sudorules cached before asking the provider again"
-msgstr ""
-
-#: src/config/SSSDConfig.py:84
-msgid "Identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:85
-msgid "Authentication provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:86
-msgid "Access control provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:87
-msgid "Password change provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:88
-msgid "SUDO provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:89
-msgid "Autofs provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:90
-msgid "Session-loading provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:91
-msgid "Host identity provider"
-msgstr ""
-
-#: src/config/SSSDConfig.py:94
-msgid "Minimum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:95
-msgid "Maximum user ID"
-msgstr ""
-
-#: src/config/SSSDConfig.py:96
-msgid "Enable enumerating all users/groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:97
-msgid "Cache credentials for offline login"
-msgstr ""
-
-#: src/config/SSSDConfig.py:98
-msgid "Store password hashes"
-msgstr ""
-
-#: src/config/SSSDConfig.py:99
-msgid "Display users/groups in fully-qualified form"
-msgstr ""
-
-#: src/config/SSSDConfig.py:100 src/config/SSSDConfig.py:107
-#: src/config/SSSDConfig.py:108 src/config/SSSDConfig.py:109
-#: src/config/SSSDConfig.py:110 src/config/SSSDConfig.py:111
-msgid "Entry cache timeout length (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:101
-msgid ""
-"Restrict or prefer a specific address family when performing DNS lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:102
-msgid "How long to keep cached entries after last successful login (days)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:103
-msgid "How long to wait for replies from DNS when resolving servers (seconds)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:104
-msgid "The domain part of service discovery DNS query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:105
-msgid "Override GID value from the identity provider with this value"
-msgstr ""
-
-#: src/config/SSSDConfig.py:106
-msgid "Treat usernames as case sensitive"
-msgstr ""
-
-#: src/config/SSSDConfig.py:114
-msgid "IPA domain"
-msgstr ""
-
-#: src/config/SSSDConfig.py:115
-msgid "IPA server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:116
-msgid "IPA client hostname"
-msgstr ""
-
-#: src/config/SSSDConfig.py:117
-msgid "Whether to automatically update the client's DNS entry in FreeIPA"
-msgstr ""
-
-#: src/config/SSSDConfig.py:118
-msgid "The interface whose IP should be used for dynamic DNS updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:119
-msgid "Search base for HBAC related objects"
-msgstr ""
-
-#: src/config/SSSDConfig.py:120
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:121
-msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
-
-#: src/config/SSSDConfig.py:122
-msgid "If set to false, host argument given by PAM will be ignored"
-msgstr ""
-
-#: src/config/SSSDConfig.py:123
-msgid "The automounter location this IPA client is using"
-msgstr ""
-
-#: src/config/SSSDConfig.py:126 src/config/SSSDConfig.py:127
-msgid "Kerberos server address"
-msgstr ""
-
-#: src/config/SSSDConfig.py:128
-msgid "Kerberos realm"
-msgstr ""
-
-#: src/config/SSSDConfig.py:129
-msgid "Authentication timeout"
-msgstr ""
-
-#: src/config/SSSDConfig.py:132
-msgid "Directory to store credential caches"
-msgstr ""
-
-#: src/config/SSSDConfig.py:133
-msgid "Location of the user's credential cache"
-msgstr ""
-
-#: src/config/SSSDConfig.py:134
-msgid "Location of the keytab to validate credentials"
-msgstr ""
-
-#: src/config/SSSDConfig.py:135
-msgid "Enable credential validation"
-msgstr ""
-
-#: src/config/SSSDConfig.py:136
-msgid "Store password if offline for later online authentication"
-msgstr ""
-
-#: src/config/SSSDConfig.py:137
-msgid "Renewable lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:138
-msgid "Lifetime of the TGT"
-msgstr ""
-
-#: src/config/SSSDConfig.py:139
-msgid "Time between two checks for renewal"
-msgstr ""
-
-#: src/config/SSSDConfig.py:140
-msgid "Enables FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:141
-msgid "Selects the principal to use for FAST"
-msgstr ""
-
-#: src/config/SSSDConfig.py:142
-msgid "Enables principal canonicalization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:145
-msgid "Server where the change password service is running if not on the KDC"
-msgstr ""
-
-#: src/config/SSSDConfig.py:148
-msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:149
-msgid "The default base DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:150
-msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
-
-#: src/config/SSSDConfig.py:151
-msgid "The default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:152
-msgid "The type of the authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:153
-msgid "The authentication token of the default bind DN"
-msgstr ""
-
-#: src/config/SSSDConfig.py:154
-msgid "Length of time to attempt connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:155
-msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
-
-#: src/config/SSSDConfig.py:156
-msgid "Length of time between attempts to reconnect while offline"
-msgstr ""
-
-#: src/config/SSSDConfig.py:157
-msgid "Use only the upper case for realm names"
-msgstr ""
-
-#: src/config/SSSDConfig.py:158
-msgid "File that contains CA certificates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:159
-msgid "Path to CA certificate directory"
-msgstr ""
-
-#: src/config/SSSDConfig.py:160
-msgid "File that contains the client certificate"
-msgstr ""
-
-#: src/config/SSSDConfig.py:161
-msgid "File that contains the client key"
-msgstr ""
-
-#: src/config/SSSDConfig.py:162
-msgid "List of possible ciphers suites"
-msgstr ""
-
-#: src/config/SSSDConfig.py:163
-msgid "Require TLS certificate verification"
-msgstr ""
-
-#: src/config/SSSDConfig.py:164
-msgid "Specify the sasl mechanism to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:165
-msgid "Specify the sasl authorization id to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:166
-msgid "Specify the sasl authorization realm to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:167
-msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
-
-#: src/config/SSSDConfig.py:168
-msgid "Kerberos service keytab"
-msgstr ""
-
-#: src/config/SSSDConfig.py:169
-msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:170
-msgid "Follow LDAP referrals"
-msgstr ""
-
-#: src/config/SSSDConfig.py:171
-msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
-
-#: src/config/SSSDConfig.py:172
-msgid "How to dereference aliases"
-msgstr ""
-
-#: src/config/SSSDConfig.py:173
-msgid "Service name for DNS service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:174
-msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
-
-#: src/config/SSSDConfig.py:175
-msgid "The number of members that must be missing to trigger a full deref"
-msgstr ""
-
-#: src/config/SSSDConfig.py:176
-msgid ""
-"Whether the LDAP library should perform a reverse lookup to canonicalize the "
-"host name during a SASL bind"
-msgstr ""
-
-#: src/config/SSSDConfig.py:178
-msgid "entryUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:179
-msgid "lastUSN attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:181
-msgid "How long to retain a connection to the LDAP server before disconnecting"
-msgstr ""
-
-#: src/config/SSSDConfig.py:183
-msgid "Disable the LDAP paging control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:186
-msgid "Length of time to wait for a search request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:187
-msgid "Length of time to wait for a enumeration request"
-msgstr ""
-
-#: src/config/SSSDConfig.py:188
-msgid "Length of time between enumeration updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:189
-msgid "Length of time between cache cleanups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:190
-msgid "Require TLS for ID lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:191
-msgid "Base DN for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:192
-msgid "Scope of user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:193
-msgid "Filter for user lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:194
-msgid "Objectclass for users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:195
-msgid "Username attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:197
-msgid "UID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:198
-msgid "Primary GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:199
-msgid "GECOS attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:200
-msgid "Home directory attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:201
-msgid "Shell attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:202
-msgid "UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:203
-msgid "User principal attribute (for Kerberos)"
-msgstr ""
-
-#: src/config/SSSDConfig.py:204
-msgid "Full Name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:205
-msgid "memberOf attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:206
-msgid "Modification time attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:208
-msgid "shadowLastChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:209
-msgid "shadowMin attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:210
-msgid "shadowMax attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:211
-msgid "shadowWarning attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:212
-msgid "shadowInactive attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:213
-msgid "shadowExpire attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:214
-msgid "shadowFlag attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:215
-msgid "Attribute listing authorized PAM services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:216
-msgid "Attribute listing authorized server hosts"
-msgstr ""
-
-#: src/config/SSSDConfig.py:217
-msgid "krbLastPwdChange attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:218
-msgid "krbPasswordExpiration attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:219
-msgid "Attribute indicating that server side password policies are active"
-msgstr ""
-
-#: src/config/SSSDConfig.py:220
-msgid "accountExpires attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:221
-msgid "userAccountControl attribute of AD"
-msgstr ""
-
-#: src/config/SSSDConfig.py:222
-msgid "nsAccountLock attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:223
-msgid "loginDisabled attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:224
-msgid "loginExpirationTime attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:225
-msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
-
-#: src/config/SSSDConfig.py:226
-msgid "SSH public key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:228
-msgid "Base DN for group lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:231
-msgid "Objectclass for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:232
-msgid "Group name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:233
-msgid "Group password"
-msgstr ""
-
-#: src/config/SSSDConfig.py:234
-msgid "GID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:235
-msgid "Group member attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:236
-msgid "Group UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:237
-msgid "Modification time attribute for groups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:239
-msgid "Maximum nesting level SSSd will follow"
-msgstr ""
-
-#: src/config/SSSDConfig.py:241
-msgid "Base DN for netgroup lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:242
-msgid "Objectclass for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:243
-msgid "Netgroup name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:244
-msgid "Netgroups members attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:245
-msgid "Netgroup triple attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:246
-msgid "Netgroup UUID attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:247
-msgid "Modification time attribute for netgroups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:249
-msgid "Base DN for service lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:250
-msgid "Objectclass for services"
-msgstr ""
-
-#: src/config/SSSDConfig.py:251
-msgid "Service name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:252
-msgid "Service port attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:253
-msgid "Service protocol attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:257
-msgid "Policy to evaluate the password expiration"
-msgstr ""
-
-#: src/config/SSSDConfig.py:260
-msgid "LDAP filter to determine access privileges"
-msgstr ""
-
-#: src/config/SSSDConfig.py:261
-msgid "Which attributes shall be used to evaluate if an account is expired"
-msgstr ""
-
-#: src/config/SSSDConfig.py:262
-msgid "Which rules should be used to evaluate access control"
-msgstr ""
-
-#: src/config/SSSDConfig.py:265
-msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
-
-#: src/config/SSSDConfig.py:266
-msgid "DNS service name for LDAP password change server"
-msgstr ""
-
-#: src/config/SSSDConfig.py:269
-msgid "Base DN for sudo rules lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:270
-msgid "Enable periodical update of all sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:271
-msgid "Length of time between rules updates"
-msgstr ""
-
-#: src/config/SSSDConfig.py:272
-msgid "Object class for sudo rules"
-msgstr ""
-
-#: src/config/SSSDConfig.py:273
-msgid "Sudo rule name"
-msgstr ""
-
-#: src/config/SSSDConfig.py:274
-msgid "Sudo rule command attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:275
-msgid "Sudo rule host attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:276
-msgid "Sudo rule user attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:277
-msgid "Sudo rule option attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:278
-msgid "Sudo rule runasuser attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:279
-msgid "Sudo rule runasgroup attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:280
-msgid "Sudo rule notbefore attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:281
-msgid "Sudo rule notafter attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:282
-msgid "Sudo rule order attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:285
-msgid "Object class for automounter maps"
-msgstr ""
-
-#: src/config/SSSDConfig.py:286
-msgid "Automounter map name attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:287
-msgid "Object class for automounter map entries"
-msgstr ""
-
-#: src/config/SSSDConfig.py:288
-msgid "Automounter map entry key attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:289
-msgid "Automounter map entry value attribute"
-msgstr ""
-
-#: src/config/SSSDConfig.py:290
-msgid "Base DN for automounter map lookups"
-msgstr ""
-
-#: src/config/SSSDConfig.py:293
-msgid "Comma separated list of allowed users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:294
-msgid "Comma separated list of prohibited users"
-msgstr ""
-
-#: src/config/SSSDConfig.py:297
-msgid "Default shell, /bin/bash"
-msgstr ""
-
-#: src/config/SSSDConfig.py:298
-msgid "Base for home directories"
-msgstr ""
-
-#: src/config/SSSDConfig.py:301
-msgid "The name of the NSS library to use"
-msgstr ""
-
-#: src/config/SSSDConfig.py:304
-msgid "PAM stack to use"
-msgstr ""
-
-#: src/monitor/monitor.c:2379
-msgid "Become a daemon (default)"
-msgstr ""
-
-#: src/monitor/monitor.c:2381
-msgid "Run interactive (not a daemon)"
-msgstr ""
-
-#: src/monitor/monitor.c:2383 src/tools/sss_debuglevel.c:77
-msgid "Specify a non-default config file"
-msgstr ""
-
-#: src/monitor/monitor.c:2385
-msgid "Print version number and exit"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1575 src/providers/ldap/ldap_child.c:381
-#: src/util/util.h:89
-msgid "Debug level"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1577 src/providers/ldap/ldap_child.c:383
-#: src/util/util.h:93
-msgid "Add debug timestamps"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1579 src/providers/ldap/ldap_child.c:385
-#: src/util/util.h:95
-msgid "Show timestamps with microseconds"
-msgstr ""
-
-#: src/providers/krb5/krb5_child.c:1581 src/providers/ldap/ldap_child.c:387
-msgid "An open file descriptor for the debug logs"
-msgstr ""
-
-#: src/providers/data_provider_be.c:1938
-msgid "Domain of the information provider (mandatory)"
-msgstr ""
-
-#: src/sss_client/common.c:878
-msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:881
-msgid "Public socket has wrong ownership or permissions."
-msgstr ""
-
-#: src/sss_client/common.c:884
-msgid "Unexpected format of the server credential message."
-msgstr ""
-
-#: src/sss_client/common.c:887
-msgid "SSSD is not run by root."
-msgstr ""
-
-#: src/sss_client/common.c:892
-msgid "An error occurred, but no description can be found."
-msgstr ""
-
-#: src/sss_client/common.c:898
-msgid "Unexpected error while looking for an error description"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:378
-msgid "Passwords do not match"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:571
-msgid "Password reset by root is not supported."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:612
-msgid "Authenticated with cached credentials"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:613
-msgid ", your cached password will expire at: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:643
-#, c-format
-msgid "Your password has expired. You have %d grace login(s) remaining."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:689
-#, c-format
-msgid "Your password will expire in %d %s."
-msgstr ""
-
-#: src/sss_client/pam_sss.c:738
-msgid "Authentication is denied until: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:759
-msgid "System is offline, password change not possible"
-msgstr ""
-
-#: src/sss_client/pam_sss.c:789 src/sss_client/pam_sss.c:802
-msgid "Password change failed. "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:792 src/sss_client/pam_sss.c:803
-msgid "Server message: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1286
-msgid "New Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1287
-msgid "Reenter new Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1373
-msgid "Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1405
-msgid "Current Password: "
-msgstr ""
-
-#: src/sss_client/pam_sss.c:1552
-msgid "Password expired. Change your password now."
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:211 src/tools/sss_useradd.c:48
-#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:43
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:615
-#: src/tools/sss_userdel.c:131 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:260 src/tools/sss_debuglevel.c:75
-msgid "The debug level to run with"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-msgid "The SSSD domain to use"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
-#: src/tools/sss_groupadd.c:56 src/tools/sss_groupdel.c:52
-#: src/tools/sss_groupmod.c:63 src/tools/sss_groupshow.c:626
-#: src/tools/sss_userdel.c:148 src/tools/sss_usermod.c:72
-#: src/tools/sss_cache.c:281
-msgid "Error setting the locale\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-msgid "Not enough memory\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
-msgid "User not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:104
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:282
-msgid "Error looking up public keys\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:94
-msgid "Failed to open a socket\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:104
-msgid "Failed to connect to the server\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:195
-msgid "Failed to execute proxy command\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:213
-msgid "The port to use to connect to the host"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:255
-msgid "Host not specified\n"
-msgstr ""
-
-#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:261
-msgid "The path to the proxy command must be absolute\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
-msgid "The UID of the user"
-msgstr ""
-
-#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
-msgid "The comment string"
-msgstr ""
-
-#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
-msgid "Home directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
-msgid "Login shell"
-msgstr ""
-
-#: src/tools/sss_useradd.c:53
-msgid "Groups"
-msgstr ""
-
-#: src/tools/sss_useradd.c:54
-msgid "Create user's directory if it does not exist"
-msgstr ""
-
-#: src/tools/sss_useradd.c:55
-msgid "Never create user's directory, overrides config"
-msgstr ""
-
-#: src/tools/sss_useradd.c:56
-msgid "Specify an alternative skeleton directory"
-msgstr ""
-
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
-msgid "The SELinux user for user's login"
-msgstr ""
-
-#: src/tools/sss_useradd.c:84 src/tools/sss_groupmod.c:76
-#: src/tools/sss_usermod.c:85
-msgid "Specify group to add to\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:108
-msgid "Specify user to add\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:117 src/tools/sss_groupadd.c:82
-#: src/tools/sss_groupdel.c:77 src/tools/sss_groupmod.c:109
-#: src/tools/sss_groupshow.c:659 src/tools/sss_userdel.c:193
-#: src/tools/sss_usermod.c:126
-msgid "Error initializing the tools - no local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:79 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:661 src/tools/sss_userdel.c:195
-#: src/tools/sss_usermod.c:128
-msgid "Error initializing the tools\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:128 src/tools/sss_groupadd.c:93
-#: src/tools/sss_groupdel.c:88 src/tools/sss_groupmod.c:119
-#: src/tools/sss_groupshow.c:670 src/tools/sss_userdel.c:204
-#: src/tools/sss_usermod.c:137
-msgid "Invalid domain specified in FQDN\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:137 src/tools/sss_groupmod.c:139
-#: src/tools/sss_groupmod.c:166 src/tools/sss_usermod.c:160
-#: src/tools/sss_usermod.c:187
-msgid "Internal error while parsing parameters\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:145 src/tools/sss_usermod.c:168
-#: src/tools/sss_usermod.c:195
-msgid "Groups must be in the same domain as user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:153
-#, c-format
-msgid "Cannot find group %s in local domain\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:168 src/tools/sss_userdel.c:214
-msgid "Cannot set default values\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:175 src/tools/sss_usermod.c:151
-msgid "The selected UID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:202 src/tools/sss_usermod.c:236
-msgid "Cannot set SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:217
-msgid "Cannot get info about the user\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:229
-msgid "User's home directory already exists, not copying data from skeldir\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:232
-#, c-format
-msgid "Cannot create user's home directory: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:243
-#, c-format
-msgid "Cannot create user's mail spool: %s\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:255
-msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:259
-msgid "A user or group with the same name or ID already exists\n"
-msgstr ""
-
-#: src/tools/sss_useradd.c:265
-msgid "Transaction error. Could not add user.\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
-msgid "The GID of the group"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:73
-msgid "Specify group to add\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:102 src/tools/sss_groupmod.c:190
-msgid "The selected GID is outside the allowed range\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:127
-msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:131
-msgid "A group with the same name or GID already exists\n"
-msgstr ""
-
-#: src/tools/sss_groupadd.c:136
-msgid "Transaction error. Could not add group.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:68
-msgid "Specify group to delete\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:101
-#, c-format
-msgid "Group %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:115
-msgid ""
-"No such group in local domain. Removing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupdel.c:120
-msgid "Internal error. Could not remove group.\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:44
-msgid "Groups to add this group to"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:46
-msgid "Groups to remove this group from"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:84 src/tools/sss_usermod.c:93
-msgid "Specify group to remove from\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:98
-msgid "Specify group to modify\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:126
-msgid ""
-"Cannot find group in local domain, modifying groups is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:147 src/tools/sss_groupmod.c:174
-msgid "Member groups must be in the same domain as parent group\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:155 src/tools/sss_groupmod.c:182
-#: src/tools/sss_usermod.c:176 src/tools/sss_usermod.c:203
-#, c-format
-msgid ""
-"Cannot find group %s in local domain, only groups in local domain are "
-"allowed\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:216
-msgid "Could not modify group - check if member group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:220
-msgid "Could not modify group - check if groupname is correct\n"
-msgstr ""
-
-#: src/tools/sss_groupmod.c:224
-msgid "Transaction error. Could not modify group.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:562
-#, c-format
-msgid "%s%sGroup: %s\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:563
-msgid "Magic Private "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:565
-#, c-format
-msgid "%sGID number: %d\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:567
-#, c-format
-msgid "%sMember users: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:574
-#, c-format
-msgid ""
-"\n"
-"%sIs a member of: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:581
-#, c-format
-msgid ""
-"\n"
-"%sMember groups: "
-msgstr ""
-
-#: src/tools/sss_groupshow.c:617
-msgid "Print indirect group members recursively"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:650
-msgid "Specify group to show\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:689
-msgid ""
-"No such group in local domain. Printing groups only allowed in local "
-"domain.\n"
-msgstr ""
-
-#: src/tools/sss_groupshow.c:694
-msgid "Internal error. Could not print group.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:133
-msgid "Remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:135
-msgid "Do not remove home directory and mail spool"
-msgstr ""
-
-#: src/tools/sss_userdel.c:137
-msgid "Force removal of files not owned by the user"
-msgstr ""
-
-#: src/tools/sss_userdel.c:139
-msgid "Kill users' processes before removing him"
-msgstr ""
-
-#: src/tools/sss_userdel.c:184
-msgid "Specify user to delete\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:230
-#, c-format
-msgid "User %s is outside the defined ID range for domain\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:255
-msgid "Cannot reset SELinux login context\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:267
-#, c-format
-msgid "WARNING: The user (uid %lu) was still logged in when deleted.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:272
-msgid "Cannot determine if the user was logged in on this platform"
-msgstr ""
-
-#: src/tools/sss_userdel.c:277
-msgid "Error while checking if the user was logged in\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:284
-#, c-format
-msgid "The post-delete command failed: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:296
-msgid "Not removing home dir - not owned by user\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:298
-#, c-format
-msgid "Cannot remove homedir: %s\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:309
-msgid ""
-"No such user in local domain. Removing users only allowed in local domain.\n"
-msgstr ""
-
-#: src/tools/sss_userdel.c:314
-msgid "Internal error. Could not remove user.\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:49
-msgid "The GID of the user"
-msgstr ""
-
-#: src/tools/sss_usermod.c:53
-msgid "Groups to add this user to"
-msgstr ""
-
-#: src/tools/sss_usermod.c:54
-msgid "Groups to remove this user from"
-msgstr ""
-
-#: src/tools/sss_usermod.c:55
-msgid "Lock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:56
-msgid "Unlock the account"
-msgstr ""
-
-#: src/tools/sss_usermod.c:117
-msgid "Specify user to modify\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:144
-msgid ""
-"Cannot find user in local domain, modifying users is allowed only in local "
-"domain\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:246
-msgid "Could not modify user - check if group names are correct\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:250
-msgid "Could not modify user - user already member of groups?\n"
-msgstr ""
-
-#: src/tools/sss_usermod.c:254
-msgid "Transaction error. Could not modify user.\n"
-msgstr ""
-
-#: src/tools/sss_cache.c:132
-#, c-format
-msgid "Couldn't invalidate %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:138
-#, c-format
-msgid "Couldn't invalidate %s %s"
-msgstr ""
-
-#: src/tools/sss_cache.c:262
-msgid "Invalidate particular user"
-msgstr ""
-
-#: src/tools/sss_cache.c:264
-msgid "Invalidate all users"
-msgstr ""
-
-#: src/tools/sss_cache.c:266
-msgid "Invalidate particular group"
-msgstr ""
-
-#: src/tools/sss_cache.c:268
-msgid "Invalidate all groups"
-msgstr ""
-
-#: src/tools/sss_cache.c:270
-msgid "Invalidate particular netgroup"
-msgstr ""
-
-#: src/tools/sss_cache.c:272
-msgid "Invalidate all netgroups"
-msgstr ""
-
-#: src/tools/sss_cache.c:274
-msgid "Only invalidate entries from a particular domain"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:43
-msgid "\n"
-msgstr ""
-
-#: src/tools/sss_debuglevel.c:102
-msgid "Specify debug level you want to set\n"
-msgstr ""
-
-#: src/tools/tools_util.c:286
-msgid "Out of memory\n"
-msgstr ""
-
-#: src/tools/tools_util.h:40
-#, c-format
-msgid "%s must be run as root\n"
-msgstr ""
-
-#: src/util/util.h:91
-msgid "Send the debug output to files instead of stderr"
-msgstr ""
diff --git a/po/zh_TW.po b/po/zh_TW.po
index d483698e7..90ddadddd 100644
--- a/po/zh_TW.po
+++ b/po/zh_TW.po
@@ -7,8 +7,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: SSSD\n"
 "Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2011-12-21 10:10+0000\n"
+"POT-Creation-Date: 2012-03-12 16:26-0400\n"
+"PO-Revision-Date: 2012-03-08 11:41+0000\n"
 "Last-Translator: sgallagh <sgallagh@redhat.com>\n"
 "Language-Team: Chinese (Taiwan) <trans-zh_TW@lists.fedoraproject.org>\n"
 "Language: zh_TW\n"
@@ -170,24 +170,20 @@ msgid "Password change provider"
 msgstr "密碼變更�供者"
 
 #: src/config/SSSDConfig.py:88
-#, fuzzy
 msgid "SUDO provider"
-msgstr "身分�供者"
+msgstr ""
 
 #: src/config/SSSDConfig.py:89
-#, fuzzy
 msgid "Autofs provider"
-msgstr "�證�供者"
+msgstr ""
 
 #: src/config/SSSDConfig.py:90
-#, fuzzy
 msgid "Session-loading provider"
-msgstr "存�控制�供者"
+msgstr ""
 
 #: src/config/SSSDConfig.py:91
-#, fuzzy
 msgid "Host identity provider"
-msgstr "身分�供者"
+msgstr ""
 
 #: src/config/SSSDConfig.py:94
 msgid "Minimum user ID"
@@ -752,9 +748,8 @@ msgid "Enable periodical update of all sudo rules"
 msgstr ""
 
 #: src/config/SSSDConfig.py:271
-#, fuzzy
 msgid "Length of time between rules updates"
-msgstr "�尋請求的等候時間長度"
+msgstr ""
 
 #: src/config/SSSDConfig.py:272
 msgid "Object class for sudo rules"
@@ -883,7 +878,7 @@ msgstr ""
 msgid "An open file descriptor for the debug logs"
 msgstr ""
 
-#: src/providers/data_provider_be.c:1938
+#: src/providers/data_provider_be.c:2022
 msgid "Domain of the information provider (mandatory)"
 msgstr ""
 
@@ -984,9 +979,8 @@ msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:215
-#, fuzzy
 msgid "The SSSD domain to use"
-msgstr "�啟動的 SSSD 網域"
+msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:229 src/tools/sss_useradd.c:71
@@ -1001,9 +995,8 @@ msgstr "設定�域設置時發生錯誤\n"
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:236
 #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:269
-#, fuzzy
 msgid "Not enough memory\n"
-msgstr "記憶體耗盡\n"
+msgstr ""
 
 #: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
 msgid "User not specified\n"
@@ -1452,9 +1445,8 @@ msgid "\n"
 msgstr ""
 
 #: src/tools/sss_debuglevel.c:102
-#, fuzzy
 msgid "Specify debug level you want to set\n"
-msgstr "指定�刪除的群組\n"
+msgstr ""
 
 #: src/tools/tools_util.c:286
 msgid "Out of memory\n"
diff --git a/src/man/po/as.po b/src/man/po/as.po
deleted file mode 100644
index 76bab076c..000000000
--- a/src/man/po/as.po
+++ /dev/null
@@ -1,6748 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Assamese (http://www.transifex.net/projects/p/fedora/team/"
-"as/)\n"
-"Language: as\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/bg.po b/src/man/po/bg.po
deleted file mode 100644
index a3360b384..000000000
--- a/src/man/po/bg.po
+++ /dev/null
@@ -1,6747 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2012-02-14 13:10+0000\n"
-"Last-Translator: sgallagh <sgallagh@redhat.com>\n"
-"Language-Team: Bulgarian <trans-bg@lists.fedoraproject.org>\n"
-"Language: bg\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/bn.po b/src/man/po/bn.po
deleted file mode 100644
index b8fa4a9c6..000000000
--- a/src/man/po/bn.po
+++ /dev/null
@@ -1,6747 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Bengali <info@ankur.org.bd>\n"
-"Language: bn\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/bn_IN.po b/src/man/po/bn_IN.po
deleted file mode 100644
index c2fc038d3..000000000
--- a/src/man/po/bn_IN.po
+++ /dev/null
@@ -1,6747 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2012-02-14 13:10+0000\n"
-"Last-Translator: sgallagh <sgallagh@redhat.com>\n"
-"Language-Team: Bengali (India) <anubad@lists.ankur.org.in>\n"
-"Language: bn_IN\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/bs.po b/src/man/po/bs.po
deleted file mode 100644
index a48797c98..000000000
--- a/src/man/po/bs.po
+++ /dev/null
@@ -1,6749 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Bosnian (http://www.transifex.net/projects/p/fedora/team/"
-"bs/)\n"
-"Language: bs\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
-"%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/ca.po b/src/man/po/ca.po
deleted file mode 100644
index 0bea56339..000000000
--- a/src/man/po/ca.po
+++ /dev/null
@@ -1,6747 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Catalan <fedora@llistes.softcatala.org>\n"
-"Language: ca\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/cs.po b/src/man/po/cs.po
index c80ad2964..36a3a1e19 100644
--- a/src/man/po/cs.po
+++ b/src/man/po/cs.po
@@ -9,9 +9,10 @@ msgstr ""
 "Project-Id-Version: SSSD\n"
 "Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
 "POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2011-12-21 10:12+0000\n"
+"PO-Revision-Date: 2012-03-08 11:52+0000\n"
 "Last-Translator: sgallagh <sgallagh@redhat.com>\n"
-"Language-Team: Czech (http://www.transifex.net/projects/p/fedora/team/cs/)\n"
+"Language-Team: Czech (http://www.transifex.net/projects/p/fedora/language/"
+"cs/)\n"
 "Language: cs\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
@@ -3597,10 +3598,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><title>
 #: sssd-ldap.5.xml:1639
-#, fuzzy
-#| msgid "OPTIONS"
 msgid "SUDO OPTIONS"
-msgstr "VOLBY"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1644
@@ -3813,10 +3812,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><title>
 #: sssd-ldap.5.xml:1825
-#, fuzzy
-#| msgid "OPTIONS"
 msgid "AUTOFS OPTIONS"
-msgstr "VOLBY"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ldap.5.xml:1827
@@ -6215,18 +6212,10 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_cache.8.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-#| "arg>"
 msgid ""
 "<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
 "replaceable> </arg>"
 msgstr ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>volby</"
-"replaceable> </arg> <arg choice='plain'><replaceable>SKUPINA</replaceable></"
-"arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_cache.8.xml:31
@@ -6238,11 +6227,9 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:42
-#, fuzzy
-#| msgid "<option>-h</option>,<option>--help</option>"
 msgid ""
 "<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr "<option>-h</option>,<option>--help</option>"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:47
@@ -6251,10 +6238,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:53
-#, fuzzy
-#| msgid "<option>-h</option>,<option>--help</option>"
 msgid "<option>-U</option>,<option>--users</option>"
-msgstr "<option>-h</option>,<option>--help</option>"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:57
@@ -6265,11 +6250,9 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:64
-#, fuzzy
-#| msgid "<option>-h</option>,<option>--help</option>"
 msgid ""
 "<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr "<option>-h</option>,<option>--help</option>"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:69
@@ -6278,10 +6261,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:75
-#, fuzzy
-#| msgid "<option>-h</option>,<option>--help</option>"
 msgid "<option>-G</option>,<option>--groups</option>"
-msgstr "<option>-h</option>,<option>--help</option>"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:79
@@ -6292,12 +6273,10 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:86
-#, fuzzy
-#| msgid "<option>-h</option>,<option>--help</option>"
 msgid ""
 "<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
 "replaceable>"
-msgstr "<option>-h</option>,<option>--help</option>"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:91
@@ -6306,10 +6285,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:97
-#, fuzzy
-#| msgid "<option>-h</option>,<option>--help</option>"
 msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr "<option>-h</option>,<option>--help</option>"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:101
@@ -6320,12 +6297,10 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:108
-#, fuzzy
-#| msgid "<option>-h</option>,<option>--help</option>"
 msgid ""
 "<option>-d</option>,<option>--domain</option> <replaceable>domain</"
 "replaceable>"
-msgstr "<option>-h</option>,<option>--help</option>"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:113
@@ -6344,19 +6319,11 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_debuglevel.8.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-#| "arg>"
 msgid ""
 "<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
 "replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
 "replaceable></arg>"
 msgstr ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>volby</"
-"replaceable> </arg> <arg choice='plain'><replaceable>SKUPINA</replaceable></"
-"arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_debuglevel.8.xml:32
@@ -6388,19 +6355,11 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_ssh_authorizedkeys.1.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-#| "arg>"
 msgid ""
 "<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
 "<replaceable>options</replaceable> </arg> <arg "
 "choice='plain'><replaceable>USER</replaceable></arg>"
 msgstr ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>volby</"
-"replaceable> </arg> <arg choice='plain'><replaceable>SKUPINA</replaceable></"
-"arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:32
@@ -6464,17 +6423,6 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:98
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
 msgid ""
 "<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
 "citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
@@ -6482,15 +6430,6 @@ msgid ""
 "<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
 "manvolnum> </citerefentry>."
 msgstr ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
@@ -6504,20 +6443,12 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_ssh_knownhostsproxy.1.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-#| "arg>"
 msgid ""
 "<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
 "<replaceable>options</replaceable> </arg> <arg "
 "choice='plain'><replaceable>HOST</replaceable></arg> <arg "
 "choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
 msgstr ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>volby</"
-"replaceable> </arg> <arg choice='plain'><replaceable>SKUPINA</replaceable></"
-"arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_knownhostsproxy.1.xml:33
@@ -6557,11 +6488,9 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_ssh_knownhostsproxy.1.xml:69
-#, fuzzy
-#| msgid "<option>-h</option>,<option>--help</option>"
 msgid ""
 "<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr "<option>-h</option>,<option>--help</option>"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_ssh_knownhostsproxy.1.xml:74
@@ -6578,17 +6507,6 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_knownhostsproxy.1.xml:97
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
 msgid ""
 "<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
 "citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
@@ -6596,15 +6514,6 @@ msgid ""
 "<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
 "manvolnum> </citerefentry>."
 msgstr ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
 
 #. type: Content of: <refsect1><title>
 #: include/service_discovery.xml:2
diff --git a/src/man/po/de.po b/src/man/po/de.po
deleted file mode 100644
index fbb257921..000000000
--- a/src/man/po/de.po
+++ /dev/null
@@ -1,6747 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: German <trans-de@lists.fedoraproject.org>\n"
-"Language: de\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/el.po b/src/man/po/el.po
deleted file mode 100644
index 5fa27291e..000000000
--- a/src/man/po/el.po
+++ /dev/null
@@ -1,6747 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Greek <trans-el@lists.fedoraproject.org>\n"
-"Language: el\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/en_GB.po b/src/man/po/en_GB.po
deleted file mode 100644
index 7796626bf..000000000
--- a/src/man/po/en_GB.po
+++ /dev/null
@@ -1,6748 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2012-02-14 13:10+0000\n"
-"Last-Translator: sgallagh <sgallagh@redhat.com>\n"
-"Language-Team: English (United Kingdom) (http://www.transifex.net/projects/p/"
-"fedora/language/en_GB/)\n"
-"Language: en_GB\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/es.po b/src/man/po/es.po
index 13ca1f95b..e88b8ec0b 100644
--- a/src/man/po/es.po
+++ b/src/man/po/es.po
@@ -3,13 +3,16 @@
 # This file is distributed under the same license as the sssd-docs package.
 #
 # Translators:
+# Adolfo Jayme Barrientos <fitoschido@gmail.com>, 2012.
+# Eduardo Villagrán <evillagr@fedoraproject.org>, 2011.
+# Eduardo Villagrán M <gotencool@gmail.com>, 2011.
 # Héctor Daniel Cabrera <logan@fedoraproject.org>, 2011.
 msgid ""
 msgstr ""
 "Project-Id-Version: SSSD\n"
 "Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
 "POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2011-12-21 10:12+0000\n"
+"PO-Revision-Date: 2012-03-08 11:52+0000\n"
 "Last-Translator: sgallagh <sgallagh@redhat.com>\n"
 "Language-Team: Spanish (Castilian) <trans-es@lists.fedoraproject.org>\n"
 "Language: es\n"
@@ -406,7 +409,7 @@ msgstr "Predeterminado: <quote>%1$s@%2$s</quote>."
 #. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:162
 msgid "try_inotify (boolean)"
-msgstr "try_inotify (booleano)"
+msgstr "try_inotify (boolean)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:165
@@ -454,7 +457,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:190
 msgid "krb5_rcache_dir (string)"
-msgstr ""
+msgstr "krb5_rcache_dir (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:193
@@ -503,47 +506,51 @@ msgid ""
 "section, for example, for NSS service, the section would be <quote>[nss]</"
 "quote>"
 msgstr ""
+"Los ajustes que pueden ser utilizados para configurar diferentes servicios "
+"se describe en esta sección. Ellos deben residir en la sección [<replaceable>"
+"$NAME</replaceable>], por ejemplo, para el servicio NSS, la sección sería "
+"<quote>[nss]</quote>"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><title>
 #: sssd.conf.5.xml:225
 msgid "General service configuration options"
-msgstr ""
+msgstr "Opciones de configuración de servicios generales"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><para>
 #: sssd.conf.5.xml:227
 msgid "These options can be used to configure any service."
-msgstr ""
+msgstr "Estas opciones pueden usarse para configurar cualquier servicio."
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:231
 msgid "debug_level (integer)"
-msgstr ""
+msgstr "debug_level (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:235
 msgid "debug_timestamps (bool)"
-msgstr ""
+msgstr "debug_timestamps (bool)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:238
 msgid "Add a timestamp to the debug messages"
-msgstr ""
+msgstr "Agregar una marca de tiempo a los mensajes de depuración"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
 #: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
 msgid "Default: true"
-msgstr ""
+msgstr "Predeterminado: true"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:246
 msgid "debug_microseconds (bool)"
-msgstr ""
+msgstr "debug_microseconds (bool)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:249
 msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
+msgstr "Agregar microsegundos a la marca de tiempo en mensajes de depuración"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
@@ -551,12 +558,12 @@ msgstr ""
 #: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
 #: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
 msgid "Default: false"
-msgstr ""
+msgstr "Predeterminado: false"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:270
 msgid "command (string)"
-msgstr ""
+msgstr "command (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:273
@@ -570,23 +577,25 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:281
 msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
+msgstr "Predeterminado: <command>sssd_${service_name}</command>"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><title>
 #: sssd.conf.5.xml:289
 msgid "NSS configuration options"
-msgstr ""
+msgstr "Opciones de configuración de NSS"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><para>
 #: sssd.conf.5.xml:291
 msgid ""
 "These options can be used to configure the Name Service Switch (NSS) service."
 msgstr ""
+"Estas opciones pueden ser usadas para configurar el servicio Name Service "
+"Switch (NSS)."
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:296
 msgid "enum_cache_timeout (integer)"
-msgstr ""
+msgstr "enum_cache_timeout (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:299
@@ -598,12 +607,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:303
 msgid "Default: 120"
-msgstr ""
+msgstr "Predeterminado: 120"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:308
 msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
+msgstr "entry_cache_nowait_percentage (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:311
@@ -635,12 +644,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:335
 msgid "Default: 50"
-msgstr ""
+msgstr "Predeterminado: 50"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:340
 msgid "entry_negative_timeout (integer)"
-msgstr ""
+msgstr "entry_negative_timeout (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:343
@@ -653,12 +662,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
 msgid "Default: 15"
-msgstr ""
+msgstr "Predeterminado: 15"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:354
 msgid "filter_users, filter_groups (string)"
-msgstr ""
+msgstr "filter_users, filter_groups (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:357
@@ -672,12 +681,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:364
 msgid "Default: root"
-msgstr ""
+msgstr "Predeterminado: root"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:369
 msgid "filter_users_in_groups (bool)"
-msgstr ""
+msgstr "filter_users_in_groups (bool)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:372
@@ -688,7 +697,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:381
 msgid "override_homedir (string)"
-msgstr ""
+msgstr "override_homedir (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
@@ -708,22 +717,22 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:395
 msgid "UID number"
-msgstr ""
+msgstr "número UID"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
 msgid "%d"
-msgstr ""
+msgstr "%d"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:399
 msgid "domain name"
-msgstr ""
+msgstr "nombre de dominio"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:402
 msgid "%f"
-msgstr ""
+msgstr "%f"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:403
@@ -733,7 +742,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
 msgid "%%"
-msgstr ""
+msgstr "%%"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
@@ -756,7 +765,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:418
 msgid "allowed_shells (string)"
-msgstr ""
+msgstr "allowed_shells (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:421
@@ -803,7 +812,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:450
 msgid "vetoed_shells (string)"
-msgstr ""
+msgstr "vetoed_shells (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:453
@@ -813,7 +822,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:458
 msgid "shell_fallback (string)"
-msgstr ""
+msgstr "shell_fallback (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:461
@@ -824,12 +833,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:465
 msgid "Default: /bin/sh"
-msgstr ""
+msgstr "Predeterminado: /bin/sh"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><title>
 #: sssd.conf.5.xml:472
 msgid "PAM configuration options"
-msgstr ""
+msgstr "Opciones de configuración PAM"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><para>
 #: sssd.conf.5.xml:474
@@ -837,11 +846,13 @@ msgid ""
 "These options can be used to configure the Pluggable Authentication Module "
 "(PAM) service."
 msgstr ""
+"Estas opciones pueden ser usadas para configurar el servicio Pluggable "
+"Authentication Module (PAM)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:479
 msgid "offline_credentials_expiration (integer)"
-msgstr ""
+msgstr "offline_credentials_expiration (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:482
@@ -853,12 +864,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:487 sssd.conf.5.xml:500
 msgid "Default: 0 (No limit)"
-msgstr ""
+msgstr "Predeterminado: 0 (Sin límite)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:493
 msgid "offline_failed_login_attempts (integer)"
-msgstr ""
+msgstr "offline_failed_login_attempts (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:496
@@ -870,7 +881,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:506
 msgid "offline_failed_login_delay (integer)"
-msgstr ""
+msgstr "offline_failed_login_delay (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:509
@@ -890,12 +901,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
 msgid "Default: 5"
-msgstr ""
+msgstr "Predeterminado: 5"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:526
 msgid "pam_verbosity (integer)"
-msgstr ""
+msgstr "pam_verbosity (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:529
@@ -907,37 +918,39 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:534
 msgid "Currently sssd supports the following values:"
-msgstr ""
+msgstr "Actualmente sssd soporta los siguientes valores:"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:537
 msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
+msgstr "<emphasis>0</emphasis>: no mostrar ningún mensaje"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:540
 msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
+msgstr "<emphasis>1</emphasis>: mostrar sólo mensajes importantes"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:544
 msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
+msgstr "<emphasis>2</emphasis>: mostrar mensajes informativos"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:547
 msgid "<emphasis>3</emphasis>: show all messages and debug information"
 msgstr ""
+"<emphasis>3</emphasis>: mostrar todos los mensajes e información de "
+"depuración"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:551 sssd.8.xml:63
 msgid "Default: 1"
-msgstr ""
+msgstr "Predeterminado: 1"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:556
 msgid "pam_id_timeout (integer)"
-msgstr ""
+msgstr "pam_id_timeout (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:559
@@ -959,12 +972,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:579
 msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
+msgstr "pam_pwd_expiration_warning (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:582
 msgid "Display a warning N days before the password expires."
-msgstr ""
+msgstr "Mostrar una advertencia N días antes que la contraseña caduque."
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:585
@@ -977,7 +990,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:591
 msgid "Default: 7"
-msgstr ""
+msgstr "Predeterminado: 7"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><title>
 #: sssd.conf.5.xml:599
@@ -1020,10 +1033,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:628
-#, fuzzy
-#| msgid "Default: 3"
 msgid "Default: 180"
-msgstr "Predeterminado: 3"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:633
@@ -1049,10 +1060,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:659
-#, fuzzy
-#| msgid "reconnection_retries (integer)"
 msgid "autofs_negative_timeout (integer)"
-msgstr "reconnection_retries (entero)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:662
@@ -1065,12 +1074,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><title>
 #: sssd.conf.5.xml:679
 msgid "DOMAIN SECTIONS"
-msgstr ""
+msgstr "SECCIONES DE DOMINIO"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:686
 msgid "min_id,max_id (integer)"
-msgstr ""
+msgstr "min_id, max_id (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:689
@@ -1078,6 +1087,8 @@ msgid ""
 "UID and GID limits for the domain. If a domain contains an entry that is "
 "outside these limits, it is ignored."
 msgstr ""
+"Límites de UID y GID para el dominio. Si un dominio contiene una entrada que "
+"está fuera de estos límites, ésta es ignorada."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:694
@@ -1091,12 +1102,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:701
 msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
+msgstr "Predeterminado: 1 para min_id, 0 (sin límite) para max_id"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:707
 msgid "timeout (integer)"
-msgstr ""
+msgstr "timeout (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:710
@@ -1108,12 +1119,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
 msgid "Default: 10"
-msgstr ""
+msgstr "Predeterminado: 10"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:721
 msgid "enumerate (bool)"
-msgstr ""
+msgstr "enumerar (bool)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:724
@@ -1135,7 +1146,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
 msgid "Default: FALSE"
-msgstr ""
+msgstr "Predeterminado: FALSE"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:737
@@ -1166,7 +1177,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:763
 msgid "entry_cache_timeout (integer)"
-msgstr ""
+msgstr "entry_cache_timeout (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:766
@@ -1174,11 +1185,13 @@ msgid ""
 "How many seconds should nss_sss consider entries valid before asking the "
 "backend again"
 msgstr ""
+"Cuántos segundos debe considerar nss_sss  como válidas las entradas antes de "
+"volver a consultar al backend"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:770
 msgid "Default: 5400"
-msgstr ""
+msgstr "Predeterminado: 5400"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:776
@@ -1248,11 +1261,13 @@ msgstr ""
 #: sssd.conf.5.xml:835
 msgid "User credentials are stored in a SHA512 hash, not in plaintext"
 msgstr ""
+"Las credenciales de usuario son almacenadas en un hash SHA512, no en texto "
+"plano"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:844
 msgid "account_cache_expiration (integer)"
-msgstr ""
+msgstr "account_cache_expiration (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:847
@@ -1266,12 +1281,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:854
 msgid "Default: 0 (unlimited)"
-msgstr ""
+msgstr "Predeterminado: 0 (ilimitado)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:860
 msgid "id_provider (string)"
-msgstr ""
+msgstr "id_provider (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:863
@@ -1281,7 +1296,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:867
 msgid "Supported backends:"
-msgstr ""
+msgstr "Backends soportados:"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:870
@@ -1315,7 +1330,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:898
 msgid "auth_provider (string)"
-msgstr ""
+msgstr "auth_provider (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:901
@@ -1323,6 +1338,8 @@ msgid ""
 "The authentication provider used for the domain.  Supported auth providers "
 "are:"
 msgstr ""
+"El proveedor de autenticación usado por el dominio.  Los proveedores de "
+"autenticación soportados son:"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:905
@@ -1361,7 +1378,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:931
 msgid "access_provider (string)"
-msgstr ""
+msgstr "access_provider (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:934
@@ -1374,12 +1391,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:940
 msgid "<quote>permit</quote> always allow access."
-msgstr ""
+msgstr "<quote>permit</quote> siempre permitir el acceso."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:943
 msgid "<quote>deny</quote> always deny access."
-msgstr ""
+msgstr "<quote>deny</quote> siempre niega el acceso."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:946
@@ -1393,12 +1410,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:953
 msgid "Default: <quote>permit</quote>"
-msgstr ""
+msgstr "Predeterminado: <quote>permit</quote>"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:958
 msgid "chpass_provider (string)"
-msgstr ""
+msgstr "chpass_provider (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:961
@@ -1422,6 +1439,10 @@ msgid ""
 "<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
 "manvolnum> </citerefentry> for more information on configuring LDAP."
 msgstr ""
+"<quote>ldap</quote> para cambiar una contraseña almacenada en un servidor "
+"LDAP.  Vea <citerefentry> <refentrytitle>sssd-ldap</refentrytitle> "
+"<manvolnum>5</manvolnum> </citerefentry> para más información sobre "
+"configurar LDAP."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:982
@@ -1430,6 +1451,9 @@ msgid ""
 "<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
 "citerefentry> for more information on configuring Kerberos."
 msgstr ""
+"<quote>krb5</quote> para cambiar una contraseña Kerberos. Vea <citerefentry> "
+"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> para más información sobre configurar Kerberos."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:990
@@ -1441,6 +1465,7 @@ msgstr ""
 #: sssd.conf.5.xml:994
 msgid "<quote>none</quote> disallows password changes explicitly."
 msgstr ""
+"<quote>none</quote> deniega explícitamente los cambios en la contraseña."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:997
@@ -1479,10 +1504,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1030
-#, fuzzy
-#| msgid "re_expression (string)"
 msgid "session_provider (string)"
-msgstr "re_expression (cadena)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1033
@@ -1514,7 +1537,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1056
 msgid "lookup_family_order (string)"
-msgstr ""
+msgstr "lookup_family_order (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1059
@@ -1526,37 +1549,37 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1063
 msgid "Supported values:"
-msgstr ""
+msgstr "Valores soportados:"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1066
 msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
+msgstr "ipv4_first: Intenta buscar dirección IPv4, si falla, intenta IPv6"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1069
 msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
+msgstr "ipv4_only: Sólo intenta resolver nombres de host a direccones IPv4."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1072
 msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
+msgstr "ipv6_first: Intenta buscar dirección IPv6, si falla, intenta IPv4"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1075
 msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
+msgstr "ipv6_only: Sólo intenta resolver nombres de host a direccones IPv6."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1078
 msgid "Default: ipv4_first"
-msgstr ""
+msgstr "Predeterminado: ipv4_first"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1084
 msgid "dns_resolver_timeout (integer)"
-msgstr ""
+msgstr "dns_resolver_timeout (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1087
@@ -1569,7 +1592,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1099
 msgid "dns_discovery_domain (string)"
-msgstr ""
+msgstr "dns_discovery_domain (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1102
@@ -1582,11 +1605,12 @@ msgstr ""
 #: sssd.conf.5.xml:1106
 msgid "Default: Use the domain part of machine's hostname"
 msgstr ""
+"Predeterminado: Utilizar la parte del dominio del nombre de host del equipo"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1112
 msgid "override_gid (integer)"
-msgstr ""
+msgstr "override_gid (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1115
@@ -1596,7 +1620,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1121
 msgid "case_sensitive (boolean)"
-msgstr ""
+msgstr "case_sensitive (boolean)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1124
@@ -1608,7 +1632,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1129
 msgid "Default: True"
-msgstr ""
+msgstr "Predeterminado: True"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd.conf.5.xml:681
@@ -1621,7 +1645,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1141
 msgid "proxy_pam_target (string)"
-msgstr ""
+msgstr "proxy_pam_target (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1144
@@ -1638,7 +1662,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1155
 msgid "proxy_lib_name (string)"
-msgstr ""
+msgstr "proxy_lib_name (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1158
@@ -1654,11 +1678,13 @@ msgid ""
 "Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
 "\"0\"/>"
 msgstr ""
+"Opciones válidas para dominios proxy.  <placeholder type=\"variablelist\" id="
+"\"0\"/>"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><title>
 #: sssd.conf.5.xml:1170
 msgid "The local domain section"
-msgstr ""
+msgstr "La sección de dominio local"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><para>
 #: sssd.conf.5.xml:1172
@@ -1667,26 +1693,31 @@ msgid ""
 "SSSD native database, that is, a domain that uses "
 "<replaceable>id_provider=local</replaceable>."
 msgstr ""
+"Esta sección contiene la configuración para dominio que almacena los "
+"usuarios y grupos en la base de datos SSSD nativa, es decir, un dominio que "
+"utiliza <replaceable>id_provider=local</replaceable>."
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1179
 msgid "default_shell (string)"
-msgstr ""
+msgstr "default_shell (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1182
 msgid "The default shell for users created with SSSD userspace tools."
 msgstr ""
+"El shell predeterminado para los usuarios creados con herramientas de "
+"espacio de usuario SSSD."
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1186
 msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
+msgstr "Predeterminado: <filename>/bin/bash</filename>"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1191
 msgid "base_directory (string)"
-msgstr ""
+msgstr "base_directory (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1194
@@ -1694,16 +1725,19 @@ msgid ""
 "The tools append the login name to <replaceable>base_directory</replaceable> "
 "and use that as the home directory."
 msgstr ""
+"Las herramientas anexan el nombre de inicio de sesión para "
+"<replaceable>base_directory</replaceable> y utilizan éste como el directorio "
+"de inicio."
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1199
 msgid "Default: <filename>/home</filename>"
-msgstr ""
+msgstr "Predeterminado: <filename>/home</filename>"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1204
 msgid "create_homedir (bool)"
-msgstr ""
+msgstr "create_homedir (bool)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1207
@@ -1715,12 +1749,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
 msgid "Default: TRUE"
-msgstr ""
+msgstr "Predeterminado: TRUE"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1216
 msgid "remove_homedir (bool)"
-msgstr ""
+msgstr "remove_homedir (bool)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1219
@@ -1732,7 +1766,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1228
 msgid "homedir_umask (integer)"
-msgstr ""
+msgstr "homedir_umask (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1231
@@ -1741,16 +1775,19 @@ msgid ""
 "<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
 "on a newly created home directory."
 msgstr ""
+"Utilizado por <citerefentry><refentrytitle>sss_useradd</refentrytitle> "
+"<manvolnum>8</manvolnum></citerefentry> para especificar los permisos "
+"predeterminados en un directorio de inicio recién creado."
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1239
 msgid "Default: 077"
-msgstr ""
+msgstr "Predeterminado: 077"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1244
 msgid "skel_dir (string)"
-msgstr ""
+msgstr "skel_dir (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1247
@@ -1760,16 +1797,20 @@ msgid ""
 "<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
 "manvolnum> </citerefentry>"
 msgstr ""
+"El directorio esqueleto, el cual contiene archivos y directorios a copiarse "
+"en el directorio principal del usuario, cuando se crea el directorio "
+"principal de <citerefentry><refentrytitle>sss_useradd</refentrytitle> "
+"<manvolnum>8</manvolnum></citerefentry>"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1257
 msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
+msgstr "Predeterminado: <filename>/etc/skel</filename>"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1262
 msgid "mail_dir (string)"
-msgstr ""
+msgstr "mail_dir (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1265
@@ -1782,12 +1823,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1272
 msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
+msgstr "Predeterminado: <filename>/var/mail</filename>"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1277
 msgid "userdel_cmd (string)"
-msgstr ""
+msgstr "userdel_cmd (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1280
@@ -1800,13 +1841,13 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1286
 msgid "Default: None, no command is run"
-msgstr ""
+msgstr "Predeterminado: None, no se ejecuta comando"
 
 #. type: Content of: <reference><refentry><refsect1><title>
 #: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
 #: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
 msgid "EXAMPLE"
-msgstr ""
+msgstr "EJEMPLO"
 
 #. type: Content of: <reference><refentry><refsect1><para><programlisting>
 #: sssd.conf.5.xml:1302
@@ -1837,6 +1878,30 @@ msgid ""
 "max_id = 20000\n"
 "enumerate = False\n"
 msgstr ""
+"[sssd]\n"
+"domains = LDAP\n"
+"services = nss, pam\n"
+"config_file_version = 2\n"
+"\n"
+"[nss]\n"
+"filter_groups = root\n"
+"filter_users = root\n"
+"\n"
+"[pam]\n"
+"\n"
+"[domain/LDAP]\n"
+"id_provider = ldap\n"
+"ldap_uri = ldap://ldap.example.com\n"
+"ldap_search_base = dc=example,dc=com\n"
+"\n"
+"auth_provider = krb5\n"
+"krb5_server = kerberos.example.com\n"
+"krb5_realm = EXAMPLE.COM\n"
+"cache_credentials = true\n"
+"\n"
+"min_id = 10000\n"
+"max_id = 20000\n"
+"enumerate = False\n"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd.conf.5.xml:1298
@@ -1865,11 +1930,25 @@ msgid ""
 "<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
 "citerefentry>."
 msgstr ""
+"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
+"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
+"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>."
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
 msgid "sssd-ldap"
-msgstr ""
+msgstr "sssd-ldap"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ldap.5.xml:23
@@ -1884,7 +1963,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ldap.5.xml:35
 msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
+msgstr "Puede configurar SSSD para usar más de un dominio LDAP."
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ldap.5.xml:38
@@ -1902,12 +1981,12 @@ msgstr ""
 #: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
 #: sssd-krb5.5.xml:63
 msgid "CONFIGURATION OPTIONS"
-msgstr ""
+msgstr "OPCIONES DE CONFIGURACIÓN"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:60
 msgid "ldap_uri (string)"
-msgstr ""
+msgstr "ldap_uri (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:63
@@ -1923,27 +2002,29 @@ msgstr ""
 #: sssd-ldap.5.xml:70
 msgid "The format of the URI must match the format defined in RFC 2732:"
 msgstr ""
+"El formato de la URI debe coincidir con el formato definido en RFC 2732:"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:73
 msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
+msgstr "ldap[s]://&lt;host&gt;[:port]"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:76
 msgid ""
 "For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
 msgstr ""
+"Para direcciones IPv6 explícitas, &lt;host&gt; debe estar entre corchetes []"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:79
 msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
+msgstr "ejemplo: ldap://[fc00::126:25]:389"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:85
 msgid "ldap_chpass_uri (string)"
-msgstr ""
+msgstr "ldap_chpass_uri (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:88
@@ -1958,6 +2039,8 @@ msgstr ""
 #: sssd-ldap.5.xml:95
 msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
 msgstr ""
+"Para habilitar el servicio descubrimiento ldap_chpass_dns_service_name debe "
+"ser establecido."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:99
@@ -1967,12 +2050,14 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:105
 msgid "ldap_search_base (string)"
-msgstr ""
+msgstr "ldap_search_base (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:108
 msgid "The default base DN to use for performing LDAP user operations."
 msgstr ""
+"El DN base por defecto que se usará para realizar operaciones LDAP de "
+"usuario."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:112
@@ -1984,7 +2069,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:116
 msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
+msgstr "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:119
@@ -2001,7 +2086,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:126
 msgid "Examples:"
-msgstr ""
+msgstr "Ejemplos:"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:129
@@ -2040,7 +2125,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:158
 msgid "ldap_schema (string)"
-msgstr ""
+msgstr "ldap_schema (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:161
@@ -2059,12 +2144,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:180
 msgid "Default: rfc2307"
-msgstr ""
+msgstr "Predeterminado: rfc2307"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:186
 msgid "ldap_default_bind_dn (string)"
-msgstr ""
+msgstr "ldap_default_bind_dn (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:189
@@ -2074,7 +2159,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:196
 msgid "ldap_default_authtok_type (string)"
-msgstr ""
+msgstr "ldap_default_authtok_type (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:199
@@ -2084,17 +2169,17 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:203
 msgid "The two mechanisms currently supported are:"
-msgstr ""
+msgstr "Los dos mecanismos actualmente soportados son:"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:206
 msgid "password"
-msgstr ""
+msgstr "contraseña"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:209
 msgid "obfuscated_password"
-msgstr ""
+msgstr "obfuscated_password"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:212
@@ -2104,7 +2189,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:218
 msgid "ldap_default_authtok (string)"
-msgstr ""
+msgstr "ldap_default_authtok (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:221
@@ -2116,127 +2201,132 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:228
 msgid "ldap_user_object_class (string)"
-msgstr ""
+msgstr "ldap_user_object_class (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:231
 msgid "The object class of a user entry in LDAP."
-msgstr ""
+msgstr "La clase de objeto de una entrada de usuario en LDAP."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:234
 msgid "Default: posixAccount"
-msgstr ""
+msgstr "Predeterminado: posixAccount"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:240
 msgid "ldap_user_name (string)"
-msgstr ""
+msgstr "ldap_user_name (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:243
 msgid "The LDAP attribute that corresponds to the user's login name."
 msgstr ""
+"El atributo LDAP que corresponde al nombre de inicio de sesión del usuario."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:247
 msgid "Default: uid"
-msgstr ""
+msgstr "Predeterminado: uid"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:253
 msgid "ldap_user_uid_number (string)"
-msgstr ""
+msgstr "ldap_user_uid_number (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:256
 msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
+msgstr "El atributo LDAP que corresponde al id de usuario."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:260
 msgid "Default: uidNumber"
-msgstr ""
+msgstr "Predeterminado: uidNumber"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:266
 msgid "ldap_user_gid_number (string)"
-msgstr ""
+msgstr "ldap_user_gid_number (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:269
 msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
+msgstr "El atributo LDAP que corresponde al id del grupo primario del usuario."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
 msgid "Default: gidNumber"
-msgstr ""
+msgstr "Predeterminado: gidNumber"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:279
 msgid "ldap_user_gecos (string)"
-msgstr ""
+msgstr "ldap_user_gecos (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:282
 msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
+msgstr "El atributo LDAP que corresponde al campo de gecos del usuario."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:286
 msgid "Default: gecos"
-msgstr ""
+msgstr "Predeterminado: gecos"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:292
 msgid "ldap_user_home_directory (string)"
-msgstr ""
+msgstr "ldap_user_home_directory (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:295
 msgid "The LDAP attribute that contains the name of the user's home directory."
 msgstr ""
+"El atributo LDAP que contiene el nombre del directorio principal del usuario."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:299
 msgid "Default: homeDirectory"
-msgstr ""
+msgstr "Predeterminado: homeDirectory"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:305
 msgid "ldap_user_shell (string)"
-msgstr ""
+msgstr "ldap_user_shell (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:308
 msgid "The LDAP attribute that contains the path to the user's default shell."
 msgstr ""
+"El atributo LDAP que contiene la ruta de acceso a la shell predeterminada "
+"del usuario."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:312
 msgid "Default: loginShell"
-msgstr ""
+msgstr "Predeterminado: loginShell"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:318
 msgid "ldap_user_uuid (string)"
-msgstr ""
+msgstr "ldap_user_uuid (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:321
 msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
 msgstr ""
+"El atributo LDAP que contiene el GUID/UUID de un objeto de usuario LDAP."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
 msgid "Default: nsUniqueId"
-msgstr ""
+msgstr "Predeterminado: nsUniqueId"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:331
 msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
+msgstr "ldap_user_modify_timestamp (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
@@ -2244,16 +2334,18 @@ msgid ""
 "The LDAP attribute that contains timestamp of the last modification of the "
 "parent object."
 msgstr ""
+"El atributo LDAP que contiene la fecha y hora de la última modificación del "
+"objeto primario."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
 msgid "Default: modifyTimestamp"
-msgstr ""
+msgstr "Predeterminado: modifyTimestamp"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:344
 msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
+msgstr "ldap_user_shadow_last_change (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:347
@@ -2267,12 +2359,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:357
 msgid "Default: shadowLastChange"
-msgstr ""
+msgstr "Predeterminado: shadowLastChange"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:363
 msgid "ldap_user_shadow_min (string)"
-msgstr ""
+msgstr "ldap_user_shadow_min (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:366
@@ -2286,12 +2378,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:375
 msgid "Default: shadowMin"
-msgstr ""
+msgstr "Predeterminado: shadowMin"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:381
 msgid "ldap_user_shadow_max (string)"
-msgstr ""
+msgstr "ldap_user_shadow_max (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:384
@@ -2305,12 +2397,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:393
 msgid "Default: shadowMax"
-msgstr ""
+msgstr "Predeterminado: shadowMax"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:399
 msgid "ldap_user_shadow_warning (string)"
-msgstr ""
+msgstr "ldap_user_shadow_warning (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:402
@@ -2324,12 +2416,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:412
 msgid "Default: shadowWarning"
-msgstr ""
+msgstr "Predeterminado: shadowWarning"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:418
 msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
+msgstr "ldap_user_shadow_inactive (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:421
@@ -2343,12 +2435,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:431
 msgid "Default: shadowInactive"
-msgstr ""
+msgstr "Predeterminado: shadowInactive"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:437
 msgid "ldap_user_shadow_expire (string)"
-msgstr ""
+msgstr "ldap_user_shadow_expire (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:440
@@ -2362,12 +2454,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:450
 msgid "Default: shadowExpire"
-msgstr ""
+msgstr "Predeterminado: shadowExpire"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:456
 msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
+msgstr "ldap_user_krb_last_pwd_change (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:459
@@ -2380,12 +2472,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:465
 msgid "Default: krbLastPwdChange"
-msgstr ""
+msgstr "Predeterminado: krbLastPwdChange"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:471
 msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
+msgstr "ldap_user_krb_password_expiration (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:474
@@ -2397,12 +2489,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:480
 msgid "Default: krbPasswordExpiration"
-msgstr ""
+msgstr "Predeterminado: krbPasswordExpiration"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:486
 msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
+msgstr "ldap_user_ad_account_expires (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:489
@@ -2414,12 +2506,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:494
 msgid "Default: accountExpires"
-msgstr ""
+msgstr "Predeterminado: accountExpires"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:500
 msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
+msgstr "ldap_user_ad_user_account_control (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:503
@@ -2431,12 +2523,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:508
 msgid "Default: userAccountControl"
-msgstr ""
+msgstr "Predeterminado: userAccountControl"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:514
 msgid "ldap_ns_account_lock (string)"
-msgstr ""
+msgstr "ldap_ns_account_lock (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:517
@@ -2448,12 +2540,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:522
 msgid "Default: nsAccountLock"
-msgstr ""
+msgstr "Predeterminado: nsAccountLock"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:528
 msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
+msgstr "ldap_user_nds_login_disabled (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:531
@@ -2465,12 +2557,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
 msgid "Default: loginDisabled"
-msgstr ""
+msgstr "Predeterminado: loginDisabled"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:541
 msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
+msgstr "ldap_user_nds_login_expiration_time (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:544
@@ -2482,7 +2574,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:555
 msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
+msgstr "ldap_user_nds_login_allowed_time_map (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:558
@@ -2494,12 +2586,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:563
 msgid "Default: loginAllowedTimeMap"
-msgstr ""
+msgstr "Predeterminado: loginAllowedTimeMap"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:569
 msgid "ldap_user_principal (string)"
-msgstr ""
+msgstr "ldap_user_principal (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:572
@@ -2511,7 +2603,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:576
 msgid "Default: krbPrincipalName"
-msgstr ""
+msgstr "Predeterminado: krbPrincipalName"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:582
@@ -2526,7 +2618,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:592
 msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
+msgstr "ldap_force_upper_case_realm (boolean)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:595
@@ -2540,7 +2632,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:608
 msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
+msgstr "ldap_enumeration_refresh_timeout (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:611
@@ -2552,14 +2644,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
 msgid "Default: 300"
-msgstr ""
+msgstr "Predeterminado: 300"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:622
-#, fuzzy
-#| msgid "reconnection_retries (integer)"
 msgid "ldap_purge_cache_timeout (integer)"
-msgstr "reconnection_retries (entero)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:625
@@ -2573,33 +2663,35 @@ msgstr ""
 #: sssd-ldap.5.xml:631
 msgid "Setting this option to zero will disable the cache cleanup operation."
 msgstr ""
+"Establecer esta opción en cero desactivará la operación de limpieza de la "
+"caché."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:635
 msgid "Default: 10800 (12 hours)"
-msgstr ""
+msgstr "Predeterminado: 10800 (12 horas)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:641
 msgid "ldap_user_fullname (string)"
-msgstr ""
+msgstr "ldap_user_fullname (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:644
 msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
+msgstr "El atributo LDAP que corresponde al nombre completo del usuario."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
 #: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
 #: sssd-ipa.5.xml:422
 msgid "Default: cn"
-msgstr ""
+msgstr "Predeterminado: cn"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:654
 msgid "ldap_user_member_of (string)"
-msgstr ""
+msgstr "ldap_user_member_of (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:657
@@ -2609,12 +2701,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
 msgid "Default: memberOf"
-msgstr ""
+msgstr "Predeterminado: memberOf"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:667
 msgid "ldap_user_authorized_service (string)"
-msgstr ""
+msgstr "ldap_user_authorized_service (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:670
@@ -2634,12 +2726,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:682
 msgid "Default: authorizedService"
-msgstr ""
+msgstr "Predeterminado: iluminada"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:688
 msgid "ldap_user_authorized_host (string)"
-msgstr ""
+msgstr "ldap_user_authorized_host (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:691
@@ -2659,77 +2751,77 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:702
 msgid "Default: host"
-msgstr ""
+msgstr "Default: host"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:708
 msgid "ldap_group_object_class (string)"
-msgstr ""
+msgstr "ldap_group_object_class (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:711
 msgid "The object class of a group entry in LDAP."
-msgstr ""
+msgstr "La clase de objeto de una entrada de grupo LDAP."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:714
 msgid "Default: posixGroup"
-msgstr ""
+msgstr "Por defecto: posixGroup"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:720
 msgid "ldap_group_name (string)"
-msgstr ""
+msgstr "ldap_group_name (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:723
 msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
+msgstr "El atributo LDAP que corresponde al nombre de grupo."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:733
 msgid "ldap_group_gid_number (string)"
-msgstr ""
+msgstr "ldap_group_gid_number (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:736
 msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
+msgstr "El atributo LDAP que corresponde al id del grupo."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:746
 msgid "ldap_group_member (string)"
-msgstr ""
+msgstr "ldap_group_member (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:749
 msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
+msgstr "El atributo LDAP que contiene los nombres de los miembros del grupo."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:753
 msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
+msgstr "Valor predeterminado: memberuid (rfc2307) / member (rfc2307bis)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:759
 msgid "ldap_group_uuid (string)"
-msgstr ""
+msgstr "ldap_group_uuid (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:762
 msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
+msgstr "El atributo LDAP que contiene el UUID/GUID de un objeto de grupo LDAP."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:772
 msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
+msgstr "ldap_group_modify_timestamp (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:785
 msgid "ldap_group_nesting_level (integer)"
-msgstr ""
+msgstr "ldap_group_nesting_level (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:788
@@ -2742,17 +2834,17 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:795
 msgid "Default: 2"
-msgstr ""
+msgstr "Predeterminado: 2"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:801
 msgid "ldap_netgroup_object_class (string)"
-msgstr ""
+msgstr "ldap_netgroup_object_class (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:804
 msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
+msgstr "La clase de objeto de una entrada netgroup en LDAP."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:807
@@ -2762,17 +2854,17 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:811
 msgid "Default: nisNetgroup"
-msgstr ""
+msgstr "Predeterminado: nisNetgroup"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:817
 msgid "ldap_netgroup_name (string)"
-msgstr ""
+msgstr "ldap_netgroup_name (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:820
 msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
+msgstr "El atributo LDAP que corresponde al nombre del netgroup."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:824
@@ -2782,7 +2874,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:834
 msgid "ldap_netgroup_member (string)"
-msgstr ""
+msgstr "ldap_netgroup_member (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:837
@@ -2797,12 +2889,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:845
 msgid "Default: memberNisNetgroup"
-msgstr ""
+msgstr "Predeterminado: memberNisNetgroup"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:851
 msgid "ldap_netgroup_triple (string)"
-msgstr ""
+msgstr "ldap_netgroup_triple (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:854
@@ -2818,12 +2910,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:861
 msgid "Default: nisNetgroupTriple"
-msgstr ""
+msgstr "Predeterminado: nisNetgroupTriple"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:867
 msgid "ldap_netgroup_uuid (string)"
-msgstr ""
+msgstr "ldap_netgroup_uuid (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:870
@@ -2839,7 +2931,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:884
 msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
+msgstr "ldap_netgroup_modify_timestamp (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:900
@@ -2853,10 +2945,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:906
-#, fuzzy
-#| msgid "Default: 3"
 msgid "Default: ipService"
-msgstr "Predeterminado: 3"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:912
@@ -2872,10 +2962,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:925
-#, fuzzy
-#| msgid "full_name_format (string)"
 msgid "ldap_service_port (string)"
-msgstr "full_name_format (cadena)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:928
@@ -2889,10 +2977,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:938
-#, fuzzy
-#| msgid "re_expression (string)"
 msgid "ldap_service_proto (string)"
-msgstr "re_expression (cadena)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:941
@@ -2929,12 +3015,12 @@ msgstr ""
 #: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
 #: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
 msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
+msgstr "Predeterminado: el valor de <emphasis>ldap_search_base</emphasis>"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:970
 msgid "ldap_search_timeout (integer)"
-msgstr ""
+msgstr "ldap_search_timeout (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:973
@@ -2955,12 +3041,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
 msgid "Default: 6"
-msgstr ""
+msgstr "Predeterminado: 6"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:991
 msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
+msgstr "ldap_enumeration_search_timeout (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:994
@@ -2973,12 +3059,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1001
 msgid "Default: 60"
-msgstr ""
+msgstr "Predeterminado: 60"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1007
 msgid "ldap_network_timeout (integer)"
-msgstr ""
+msgstr "ldap_network_timeout (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1010
@@ -2994,7 +3080,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1033
 msgid "ldap_opt_timeout (integer)"
-msgstr ""
+msgstr "ldap_opt_timeout (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1036
@@ -3007,7 +3093,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1048
 msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
+msgstr "ldap_connection_expire_timeout (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1051
@@ -3021,12 +3107,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1059
 msgid "Default: 900 (15 minutes)"
-msgstr ""
+msgstr "Predeterminado: 900 (15 minutos)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1065
 msgid "ldap_page_size (integer)"
-msgstr ""
+msgstr "ldap_page_size (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1068
@@ -3038,7 +3124,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1073
 msgid "Default: 1000"
-msgstr ""
+msgstr "Predeterminado: 1000"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1079
@@ -3071,7 +3157,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1103
 msgid "ldap_deref_threshold (integer)"
-msgstr ""
+msgstr "ldap_deref_threshold (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1106
@@ -3107,7 +3193,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1137
 msgid "ldap_tls_reqcert (string)"
-msgstr ""
+msgstr "ldap_tls_reqcert (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1140
@@ -3150,17 +3236,17 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1169
 msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
+msgstr "<emphasis>hard</emphasis> = Igual que <quote>demand</quote>"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1173
 msgid "Default: hard"
-msgstr ""
+msgstr "Predeterminado: hard"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1179
 msgid "ldap_tls_cacert (string)"
-msgstr ""
+msgstr "ldap_tls_cacert (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1182
@@ -3179,7 +3265,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1194
 msgid "ldap_tls_cacertdir (string)"
-msgstr ""
+msgstr "ldap_tls_cacertdir (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1197
@@ -3193,7 +3279,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1212
 msgid "ldap_tls_cert (string)"
-msgstr ""
+msgstr "ldap_tls_cert (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1215
@@ -3204,22 +3290,22 @@ msgstr ""
 #: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
 #: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
 msgid "Default: not set"
-msgstr ""
+msgstr "Predeterminado: no definido"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1225
 msgid "ldap_tls_key (string)"
-msgstr ""
+msgstr "ldap_tls_key (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1228
 msgid "Specifies the file that contains the client's key."
-msgstr ""
+msgstr "Especifica el archivo que contiene la clave del cliente."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1237
 msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
+msgstr "ldap_tls_cipher_suite (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1240
@@ -3244,7 +3330,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1266
 msgid "ldap_sasl_mech (string)"
-msgstr ""
+msgstr "ldap_sasl_mech (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1269
@@ -3252,16 +3338,18 @@ msgid ""
 "Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
 "supported."
 msgstr ""
+"Especifica el mecanismo SASL a emplear.  Actualmente sólo GSSAPI está "
+"probado y soportado."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
 msgid "Default: none"
-msgstr ""
+msgstr "Predeterminado: none"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1279
 msgid "ldap_sasl_authid (string)"
-msgstr ""
+msgstr "ldap_sasl_authid (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1282
@@ -3273,12 +3361,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1287
 msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
+msgstr "Predeterminado: host/machine.fqdn@REALM"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1293
 msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
+msgstr "ldap_sasl_canonicalize (boolean)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1296
@@ -3290,12 +3378,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1301
 msgid "Default: false;"
-msgstr ""
+msgstr "Predeterminado: false;"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1307
 msgid "ldap_krb5_keytab (string)"
-msgstr ""
+msgstr "ldap_krb5_keytab (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1310
@@ -3323,7 +3411,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1334
 msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
+msgstr "ldap_krb5_ticket_lifetime (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1337
@@ -3333,12 +3421,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1341
 msgid "Default: 86400 (24 hours)"
-msgstr ""
+msgstr "Predeterminado: 86400 (24 horas)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
 msgid "krb5_server (string)"
-msgstr ""
+msgstr "krb5_server (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
@@ -3371,7 +3459,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
 msgid "krb5_realm (string)"
-msgstr ""
+msgstr "krb5_realm (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1379
@@ -3382,11 +3470,13 @@ msgstr ""
 #: sssd-ldap.5.xml:1382
 msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
 msgstr ""
+"Predeterminado: Predeterminados del sistema, vea <filename>/etc/krb5.conf</"
+"filename>"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
 msgid "krb5_canonicalize (boolean)"
-msgstr ""
+msgstr "krb5_canonicalize (boolean)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1391
@@ -3398,7 +3488,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1403
 msgid "ldap_pwd_policy (string)"
-msgstr ""
+msgstr "ldap_pwd_policy (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1406
@@ -3406,6 +3496,8 @@ msgid ""
 "Select the policy to evaluate the password expiration on the client side. "
 "The following values are allowed:"
 msgstr ""
+"Seleccione la política para evaluar la caducidad de la contraseña en el lado "
+"del cliente. Los siguientes valores son permitidos:"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1411
@@ -3416,19 +3508,11 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1416
-#, fuzzy
-#| msgid ""
-#| "A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-#| "manvolnum> </citerefentry>-compatible format that describes how to "
-#| "translate a (name, domain) tuple into a fully qualified name."
 msgid ""
 "<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
 "refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
 "evaluate if the password has expired."
 msgstr ""
-"Un formato compatible con <citerefentry> <refentrytitle>printf</"
-"refentrytitle> <manvolnum>3</manvolnum> </citerefentry> que describe cómo "
-"traducir una tupla (nombre, dominio), a un nombre totalmente calificado."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1422
@@ -3441,7 +3525,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1434
 msgid "ldap_referrals (boolean)"
-msgstr ""
+msgstr "ldap_referrals (boolean)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1437
@@ -3458,22 +3542,24 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1452
 msgid "ldap_dns_service_name (string)"
-msgstr ""
+msgstr "ldap_dns_service_name (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1455
 msgid "Specifies the service name to use when service discovery is enabled."
 msgstr ""
+"Especifica el nombre del servicio para utilizar cuando está habilitado el "
+"servicio de descubrimiento."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1459
 msgid "Default: ldap"
-msgstr ""
+msgstr "Predeterminado: ldap"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1465
 msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
+msgstr "ldap_chpass_dns_service_name (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1468
@@ -3481,6 +3567,9 @@ msgid ""
 "Specifies the service name to use to find an LDAP server which allows "
 "password changes when service discovery is enabled."
 msgstr ""
+"Especifica el nombre del servicio para utilizar al buscar un servidor LDAP "
+"que permita cambios de contraseña cuando está habilitado el servicio de "
+"descubrimiento."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1473
@@ -3490,7 +3579,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1479
 msgid "ldap_access_filter (string)"
-msgstr ""
+msgstr "ldap_access_filter (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1482
@@ -3505,7 +3594,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
 msgid "Example:"
-msgstr ""
+msgstr "Ejemplo:"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
 #: sssd-ldap.5.xml:1495
@@ -3515,6 +3604,9 @@ msgid ""
 "ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
 "                        "
 msgstr ""
+"access_provider = ldap\n"
+"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
+"                        "
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1499
@@ -3535,12 +3627,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
 msgid "Default: Empty"
-msgstr ""
+msgstr "Predeterminado: vacío"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1518
 msgid "ldap_account_expire_policy (string)"
-msgstr ""
+msgstr "ldap_account_expire_policy (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1521
@@ -3560,7 +3652,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1532
 msgid "The following values are allowed:"
-msgstr ""
+msgstr "Los siguientes valores están permitidos:"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1535
@@ -3598,22 +3690,24 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1568
 msgid "ldap_access_order (string)"
-msgstr ""
+msgstr "ldap_access_order (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1571
 msgid "Comma separated list of access control options.  Allowed values are:"
 msgstr ""
+"Lista separada por coma de opciones de control de acceso.  Los valores "
+"permitidos son:"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1575
 msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
+msgstr "<emphasis>filtro</emphasis>: utilizar ldap_access_filter"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1578
 msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
+msgstr "<emphasis>caducar</emphasis>: utilizar ldap_account_expire_policy"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1582
@@ -3621,6 +3715,8 @@ msgid ""
 "<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
 "to determine access"
 msgstr ""
+"<emphasis>authorized_service</emphasis>: utilizar el atributo "
+"autorizedService para determinar el acceso"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1587
@@ -3630,7 +3726,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1591
 msgid "Default: filter"
-msgstr ""
+msgstr "Predeterminado: filter"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1594
@@ -3638,11 +3734,13 @@ msgid ""
 "Please note that it is a configuration error if a value is used more than "
 "once."
 msgstr ""
+"Tenga en cuenta que es un error de configuración si un valor es usado más de "
+"una vez."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1601
 msgid "ldap_deref (string)"
-msgstr ""
+msgstr "ldap_deref (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1604
@@ -3696,10 +3794,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><title>
 #: sssd-ldap.5.xml:1639
-#, fuzzy
-#| msgid "OPTIONS"
 msgid "SUDO OPTIONS"
-msgstr "OPCIONES"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1644
@@ -3713,17 +3809,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1650
-#, fuzzy
-#| msgid "Default: 3"
 msgid "Default: sudoRole"
-msgstr "Predeterminado: 3"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1656
-#, fuzzy
-#| msgid "full_name_format (string)"
 msgid "ldap_sudorule_name (string)"
-msgstr "full_name_format (cadena)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1659
@@ -3742,10 +3834,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1676
-#, fuzzy
-#| msgid "Default: 3"
 msgid "Default: sudoCommand"
-msgstr "Predeterminado: 3"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1682
@@ -3761,10 +3851,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1690
-#, fuzzy
-#| msgid "Default: 3"
 msgid "Default: sudoHost"
-msgstr "Predeterminado: 3"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1696
@@ -3780,17 +3868,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1703
-#, fuzzy
-#| msgid "Default: 3"
 msgid "Default: sudoUser"
-msgstr "Predeterminado: 3"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1709
-#, fuzzy
-#| msgid "re_expression (string)"
 msgid "ldap_sudorule_option (string)"
-msgstr "re_expression (cadena)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1712
@@ -3799,10 +3883,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1716
-#, fuzzy
-#| msgid "Default: 3"
 msgid "Default: sudoOption"
-msgstr "Predeterminado: 3"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1722
@@ -3884,10 +3966,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1782
-#, fuzzy
-#| msgid "Default: 3"
 msgid "Default: sudoOrder"
-msgstr "Predeterminado: 3"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1788
@@ -3928,10 +4008,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><title>
 #: sssd-ldap.5.xml:1825
-#, fuzzy
-#| msgid "OPTIONS"
 msgid "AUTOFS OPTIONS"
-msgstr "OPCIONES"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ldap.5.xml:1827
@@ -3967,10 +4045,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1853
-#, fuzzy
-#| msgid "Default: 3"
 msgid "Default: ou"
-msgstr "Predeterminado: 3"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1860
@@ -4011,12 +4087,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><title>
 #: sssd-ldap.5.xml:1904
 msgid "ADVANCED OPTIONS"
-msgstr ""
+msgstr "OPCIONES AVANZADAS"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1911
 msgid "ldap_netgroup_search_base (string)"
-msgstr ""
+msgstr "ldap_netgroup_search_base (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1914
@@ -4027,7 +4103,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1930
 msgid "ldap_user_search_base (string)"
-msgstr ""
+msgstr "ldap_user_search_base (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1933
@@ -4037,7 +4113,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1949
 msgid "ldap_group_search_base (string)"
-msgstr ""
+msgstr "ldap_group_search_base (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1952
@@ -4047,7 +4123,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1968
 msgid "ldap_user_search_filter (string)"
-msgstr ""
+msgstr "ldap_user_search_filter (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1971
@@ -4070,6 +4146,8 @@ msgid ""
 "                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
 "                        "
 msgstr ""
+"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
+"                        "
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1988
@@ -4081,7 +4159,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1995
 msgid "ldap_group_search_filter (string)"
-msgstr ""
+msgstr "ldap_group_search_filter (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1998
@@ -4148,17 +4226,25 @@ msgid ""
 "    cache_credentials = true\n"
 "    enumerate = true\n"
 msgstr ""
+"    [domain/LDAP]\n"
+"    id_provider = ldap\n"
+"    auth_provider = ldap\n"
+"    ldap_uri = ldap://ldap.mydomain.org\n"
+"    ldap_search_base = dc=mydomain,dc=org\n"
+"    ldap_tls_reqcert = demand\n"
+"    cache_credentials = true\n"
+"    enumerate = true\n"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
 #: sssd-krb5.5.xml:441
 msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
+msgstr "<placeholder type=\"programlisting\" id=\"0\"/>"
 
 #. type: Content of: <reference><refentry><refsect1><title>
 #: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
 msgid "NOTES"
-msgstr ""
+msgstr "NOTAS"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ldap.5.xml:2087
@@ -4177,6 +4263,10 @@ msgid ""
 "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
 "<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
 msgstr ""
+"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
+"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
+"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
 
 #. type: Content of: <refentryinfo>
 #: pam_sss.8.xml:8 include/upstream.xml:2
@@ -4184,16 +4274,18 @@ msgid ""
 "<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
 "fedorahosted.org/sssd</orgname>"
 msgstr ""
+"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
+"fedorahosted.org/sssd</orgname>"
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: pam_sss.8.xml:13 pam_sss.8.xml:18
 msgid "pam_sss"
-msgstr ""
+msgstr "pam_sss"
 
 #. type: Content of: <reference><refentry><refnamediv><refpurpose>
 #: pam_sss.8.xml:19
 msgid "PAM module for SSSD"
-msgstr ""
+msgstr "Módulo PAM para SSSD"
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: pam_sss.8.xml:24
@@ -4205,6 +4297,12 @@ msgid ""
 "replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
 "arg>"
 msgstr ""
+"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
+"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
+"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
+"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
+"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
+"arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: pam_sss.8.xml:45
@@ -4217,7 +4315,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: pam_sss.8.xml:55
 msgid "<option>quiet</option>"
-msgstr ""
+msgstr "<option>quiet</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: pam_sss.8.xml:58
@@ -4227,7 +4325,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: pam_sss.8.xml:63
 msgid "<option>forward_pass</option>"
-msgstr ""
+msgstr "<option>forward_pass</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: pam_sss.8.xml:66
@@ -4239,7 +4337,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: pam_sss.8.xml:73
 msgid "<option>use_first_pass</option>"
-msgstr ""
+msgstr "<option>use_first_pass</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: pam_sss.8.xml:76
@@ -4252,7 +4350,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: pam_sss.8.xml:84
 msgid "<option>use_authtok</option>"
-msgstr ""
+msgstr "<option>use_authtok</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: pam_sss.8.xml:87
@@ -4264,7 +4362,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: pam_sss.8.xml:94
 msgid "<option>retry=N</option>"
-msgstr ""
+msgstr "<option>retry=N</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: pam_sss.8.xml:97
@@ -4296,7 +4394,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><title>
 #: pam_sss.8.xml:117
 msgid "FILES"
-msgstr ""
+msgstr "ARCHIVOS"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: pam_sss.8.xml:118
@@ -4332,11 +4430,13 @@ msgid ""
 "<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
 "manvolnum> </citerefentry>"
 msgstr ""
+"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
+"manvolnum> </citerefentry>"
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
 msgid "sssd_krb5_locator_plugin"
-msgstr ""
+msgstr "sssd_krb5_locator_plugin"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd_krb5_locator_plugin.8.xml:22
@@ -4388,11 +4488,15 @@ msgid ""
 "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
 "<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
 msgstr ""
+"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
+"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
+"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sssd-simple.5.xml:10 sssd-simple.5.xml:16
 msgid "sssd-simple"
-msgstr ""
+msgstr "sssd-simple"
 
 #. type: Content of: <reference><refentry><refnamediv><refpurpose>
 #: sssd-simple.5.xml:17
@@ -4420,7 +4524,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
 #: sssd-simple.5.xml:43
 msgid "If all lists are empty, access is granted"
-msgstr ""
+msgstr "Si todas las listas están vacías, se concede acceso"
 
 #. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
 #: sssd-simple.5.xml:47
@@ -4446,7 +4550,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-simple.5.xml:78
 msgid "simple_allow_users (string)"
-msgstr ""
+msgstr "simple_allow_users (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-simple.5.xml:81
@@ -4456,7 +4560,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-simple.5.xml:88
 msgid "simple_deny_users (string)"
-msgstr ""
+msgstr "simple_deny_users (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-simple.5.xml:91
@@ -4466,7 +4570,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-simple.5.xml:97
 msgid "simple_allow_groups (string)"
-msgstr ""
+msgstr "simple_allow_groups (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-simple.5.xml:100
@@ -4478,7 +4582,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-simple.5.xml:108
 msgid "simple_deny_groups (string)"
-msgstr ""
+msgstr "simple_deny_groups (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-simple.5.xml:111
@@ -4520,6 +4624,9 @@ msgid ""
 "    access_provider = simple\n"
 "    simple_allow_users = user1, user2\n"
 msgstr ""
+"    [domain/example.com]\n"
+"    access_provider = simple\n"
+"    simple_allow_users = user1, user2\n"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-simple.5.xml:145
@@ -4528,11 +4635,14 @@ msgid ""
 "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
 "refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
 msgstr ""
+"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
+"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
 msgid "sssd-ipa"
-msgstr ""
+msgstr "sssd-ipa"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ipa.5.xml:23
@@ -4576,7 +4686,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:72
 msgid "ipa_domain (string)"
-msgstr ""
+msgstr "ipa_domain (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:75
@@ -4588,7 +4698,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:83
 msgid "ipa_server (string)"
-msgstr ""
+msgstr "ipa_server (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:86
@@ -4603,7 +4713,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:99
 msgid "ipa_hostname (string)"
-msgstr ""
+msgstr "ipa_hostname (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:102
@@ -4615,7 +4725,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:110
 msgid "ipa_dyndns_update (boolean)"
-msgstr ""
+msgstr "ipa_dyndns_update (boolean)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:113
@@ -4634,7 +4744,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:129
 msgid "ipa_dyndns_iface (string)"
-msgstr ""
+msgstr "ipa_dyndns_iface (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:132
@@ -4646,12 +4756,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:137
 msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
+msgstr "Predeterminado: Utilizar la dirección IP de la conexión IPA LDAP"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:143
 msgid "ipa_hbac_search_base (string)"
-msgstr ""
+msgstr "ipa_hbac_search_base (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:146
@@ -4661,7 +4771,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:150
 msgid "Default: Use base DN"
-msgstr ""
+msgstr "Predeterminado: Utilizar DN base"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:156
@@ -4694,7 +4804,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
 msgid "krb5_validate (boolean)"
-msgstr ""
+msgstr "krb5_validate (boolean)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
@@ -4735,7 +4845,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:247
 msgid "ipa_hbac_refresh (integer)"
-msgstr ""
+msgstr "ipa_hbac_refresh (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:250
@@ -4748,12 +4858,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:257
 msgid "Default: 5 (seconds)"
-msgstr ""
+msgstr "Predeterminado: 5 (segundos)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:262
 msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
+msgstr "ipa_hbac_treat_deny_as (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:265
@@ -4781,12 +4891,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:284
 msgid "Default: DENY_ALL"
-msgstr ""
+msgstr "Predeterminado: DENY_ALL"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:289
 msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
+msgstr "ipa_hbac_support_srchost (boolean)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:292
@@ -4804,10 +4914,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:307
-#, fuzzy
-#| msgid "re_expression (string)"
 msgid "ipa_automount_location (string)"
-msgstr "re_expression (cadena)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:310
@@ -4822,7 +4930,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:319
 msgid "ipa_netgroup_member_of (string)"
-msgstr ""
+msgstr "ipa_netgroup_member_of (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:322
@@ -4832,7 +4940,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:331
 msgid "ipa_netgroup_member_user (string)"
-msgstr ""
+msgstr "ipa_netgroup_member_user (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:334
@@ -4844,12 +4952,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
 msgid "Default: memberUser"
-msgstr ""
+msgstr "Predeterminado: memberUser"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:344
 msgid "ipa_netgroup_member_host (string)"
-msgstr ""
+msgstr "ipa_netgroup_member_host (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:347
@@ -4861,12 +4969,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
 msgid "Default: memberHost"
-msgstr ""
+msgstr "Predeterminado: memberHost"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:356
 msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
+msgstr "ipa_netgroup_member_ext_host (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:359
@@ -4878,12 +4986,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:363
 msgid "Default: externalHost"
-msgstr ""
+msgstr "Predeterminado: externalHost"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:368
 msgid "ipa_netgroup_domain (string)"
-msgstr ""
+msgstr "ipa_netgroup_domain (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:371
@@ -4893,12 +5001,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:375
 msgid "Default: nisDomainName"
-msgstr ""
+msgstr "Predeterminado: nisDomainName"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:381
 msgid "ipa_host_object_class (string)"
-msgstr ""
+msgstr "ipa_host_object_class (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
@@ -4908,7 +5016,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
 msgid "Default: ipaHost"
-msgstr ""
+msgstr "Predeterminado: ipaHost"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:392
@@ -4977,10 +5085,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:459
-#, fuzzy
-#| msgid "Default: 3"
 msgid "Default: seeAlso"
-msgstr "Predeterminado: 3"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:464
@@ -5056,10 +5162,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:519
-#, fuzzy
-#| msgid "Default: 3"
 msgid "Default: ipaUniqueID"
-msgstr "Predeterminado: 3"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:524
@@ -5093,6 +5197,10 @@ msgid ""
 "    ipa_server = ipaserver.example.com\n"
 "    ipa_hostname = myhost.example.com\n"
 msgstr ""
+"    [domain/example.com]\n"
+"    id_provider = ipa\n"
+"    ipa_server = ipaserver.example.com\n"
+"    ipa_hostname = myhost.example.com\n"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ipa.5.xml:564
@@ -5104,16 +5212,22 @@ msgid ""
 "citerefentry>, <citerefentry> <refentrytitle>sssd</"
 "refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
 msgstr ""
+"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
+"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
+"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sssd</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sssd.8.xml:10 sssd.8.xml:15
 msgid "sssd"
-msgstr ""
+msgstr "sssd"
 
 #. type: Content of: <reference><refentry><refnamediv><refpurpose>
 #: sssd.8.xml:16
 msgid "System Security Services Daemon"
-msgstr ""
+msgstr "System Security Services Daemon"
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sssd.8.xml:21
@@ -5121,6 +5235,8 @@ msgid ""
 "<command>sssd</command> <arg choice='opt'> <replaceable>options</"
 "replaceable> </arg>"
 msgstr ""
+"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd.8.xml:31
@@ -5140,47 +5256,53 @@ msgid ""
 "<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
 "replaceable>"
 msgstr ""
+"<option>-d</option>,<option>--debug-level</option> <replaceable>NIVEL</"
+"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sssd.8.xml:53
 msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
+msgstr "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sssd.8.xml:57
 msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
 msgstr ""
+"<emphasis>1</emphasis>: Agregar marca de tiempo a mensajes de depuración "
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sssd.8.xml:60
 msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
 msgstr ""
+"<emphasis>0</emphasis>: Desactiva marca de tiempo en mensajes de depuración"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sssd.8.xml:69
 msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
+msgstr "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sssd.8.xml:73
 msgid ""
 "<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
 msgstr ""
+"<emphasis>1</emphasis>: Agregar microsegundos a la marca de tiempo en "
+"mensajes de depuración"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sssd.8.xml:76
 msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
+msgstr "<emphasis>0</emphasis>: Desactiva microsegundos en marcas de tiempo"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sssd.8.xml:79
 msgid "Default: 0"
-msgstr ""
+msgstr "Predeterminado: 0"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sssd.8.xml:85
 msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
+msgstr "<option>-f</option>,<option>--debug-to-files</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sssd.8.xml:89
@@ -5193,27 +5315,27 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sssd.8.xml:97
 msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
+msgstr "<option>-D</option>,<option>--daemon</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sssd.8.xml:101
 msgid "Become a daemon after starting up."
-msgstr ""
+msgstr "Convertido en un demonio después de la puesta en marcha."
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sssd.8.xml:107
 msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
+msgstr "<option>-i</option>,<option>--interactive</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sssd.8.xml:111
 msgid "Run in the foreground, don't become a daemon."
-msgstr ""
+msgstr "Ejecutar en primer plano, no convertirse en un demonio."
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sssd.8.xml:117 sss_debuglevel.8.xml:42
 msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
+msgstr "<option>-c</option>,<option>--config</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sssd.8.xml:121 sss_debuglevel.8.xml:46
@@ -5227,7 +5349,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sssd.8.xml:135
 msgid "<option>--version</option>"
-msgstr ""
+msgstr "<option>--version</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sssd.8.xml:139
@@ -5237,12 +5359,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><title>
 #: sssd.8.xml:147
 msgid "Signals"
-msgstr ""
+msgstr "Señales"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sssd.8.xml:150
 msgid "SIGTERM/SIGINT"
-msgstr ""
+msgstr "SIGTERM/SIGINT"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sssd.8.xml:153
@@ -5254,7 +5376,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sssd.8.xml:159
 msgid "SIGHUP"
-msgstr ""
+msgstr "SIGHUP"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sssd.8.xml:162
@@ -5267,7 +5389,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sssd.8.xml:170
 msgid "SIGUSR1"
-msgstr ""
+msgstr "SIGUSR1"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sssd.8.xml:173
@@ -5279,7 +5401,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sssd.8.xml:179
 msgid "SIGUSR2"
-msgstr ""
+msgstr "SIGUSR2"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sssd.8.xml:182
@@ -5303,11 +5425,22 @@ msgid ""
 "<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
 "citerefentry>."
 msgstr ""
+"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
+"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>."
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
 msgid "sss_obfuscate"
-msgstr ""
+msgstr "sss_obfuscate"
 
 #. type: Content of: <reference><refentry><refnamediv><refpurpose>
 #: sss_obfuscate.8.xml:16
@@ -5321,6 +5454,9 @@ msgid ""
 "replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
 "replaceable></arg>"
 msgstr ""
+"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>[CONTRASEÑA]</"
+"replaceable></arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_obfuscate.8.xml:32
@@ -5355,7 +5491,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_obfuscate.8.xml:63
 msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
+msgstr "<option>-s</option>,<option>--stdin</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_obfuscate.8.xml:67
@@ -5369,6 +5505,8 @@ msgid ""
 "<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
 "replaceable>"
 msgstr ""
+"<option>-d</option>,<option>--domain</option> <replaceable>DOMINIO</"
+"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_obfuscate.8.xml:79
@@ -5382,6 +5520,8 @@ msgstr ""
 msgid ""
 "<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
 msgstr ""
+"<option>-f</option>,<option>--file</option> <replaceable>ARCHIVO</"
+"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_obfuscate.8.xml:91
@@ -5391,7 +5531,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_obfuscate.8.xml:95
 msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
+msgstr "Predeterminado: <filename>/etc/sssd/sssd.conf</filename>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_obfuscate.8.xml:105
@@ -5399,16 +5539,18 @@ msgid ""
 "<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
 "manvolnum> </citerefentry>"
 msgstr ""
+"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry>"
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sss_useradd.8.xml:10 sss_useradd.8.xml:15
 msgid "sss_useradd"
-msgstr ""
+msgstr "sss_useradd"
 
 #. type: Content of: <reference><refentry><refnamediv><refpurpose>
 #: sss_useradd.8.xml:16
 msgid "create a new user"
-msgstr ""
+msgstr "Crea un nuevo usuario"
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_useradd.8.xml:21
@@ -5417,6 +5559,9 @@ msgid ""
 "replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
 "arg>"
 msgstr ""
+"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
+"arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_useradd.8.xml:32
@@ -5430,6 +5575,7 @@ msgstr ""
 msgid ""
 "<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
 msgstr ""
+"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_useradd.8.xml:48
@@ -5444,6 +5590,8 @@ msgid ""
 "<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
 "replaceable>"
 msgstr ""
+"<option>-c</option>,<option>--gecos</option> <replaceable>COMENTARIO</"
+"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_useradd.8.xml:60 sss_usermod.8.xml:48
@@ -5458,6 +5606,8 @@ msgid ""
 "<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
 "replaceable>"
 msgstr ""
+"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
+"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_useradd.8.xml:72
@@ -5474,6 +5624,7 @@ msgstr ""
 msgid ""
 "<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
 msgstr ""
+"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_useradd.8.xml:87
@@ -5489,6 +5640,8 @@ msgid ""
 "<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
 "replaceable>"
 msgstr ""
+"<option>-G</option>,<option>--groups</option> <replaceable>GRUPOS</"
+"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_useradd.8.xml:101
@@ -5498,7 +5651,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_useradd.8.xml:107
 msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
+msgstr "<option>-m</option>,<option>--create-home</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_useradd.8.xml:111
@@ -5511,13 +5664,15 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_useradd.8.xml:121
 msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
+msgstr "<option>-M</option>,<option>--no-create-home</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_useradd.8.xml:125
 msgid ""
 "Do not create the user's home directory. Overrides configuration settings."
 msgstr ""
+"No se crear el directorio principal del usuario. Reemplaza los valores de "
+"configuración."
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_useradd.8.xml:132
@@ -5525,6 +5680,8 @@ msgid ""
 "<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
 "replaceable>"
 msgstr ""
+"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
+"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_useradd.8.xml:137
@@ -5548,6 +5705,8 @@ msgid ""
 "<option>-Z</option>,<option>--selinux-user</option> "
 "<replaceable>SELINUX_USER</replaceable>"
 msgstr ""
+"<option>-Z</option>,<option>--selinux-user</option> "
+"<replaceable>SELINUX_USER</replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_useradd.8.xml:157
@@ -5569,11 +5728,20 @@ msgid ""
 "citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
 "refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
 msgstr ""
+"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
+"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
 msgid "sssd-krb5"
-msgstr ""
+msgstr "sssd-krb5"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-krb5.5.xml:23
@@ -5628,7 +5796,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-krb5.5.xml:113
 msgid "krb5_kpasswd (string)"
-msgstr ""
+msgstr "krb5_kpasswd (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:116
@@ -5650,7 +5818,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:129
 msgid "Default: Use the KDC"
-msgstr ""
+msgstr "Predeterminado: Use the KDC"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-krb5.5.xml:135
@@ -5672,7 +5840,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:151
 msgid "Default: /tmp"
-msgstr ""
+msgstr "Predeterminado: /tmp"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-krb5.5.xml:157
@@ -5697,7 +5865,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
 #: sssd-krb5.5.xml:179
 msgid "%r"
-msgstr ""
+msgstr "%r"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:180
@@ -5707,7 +5875,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
 #: sssd-krb5.5.xml:183
 msgid "%h"
-msgstr ""
+msgstr "%h"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:184
@@ -5717,17 +5885,17 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:189
 msgid "value of krb5ccache_dir"
-msgstr ""
+msgstr "valor de krb5ccache_dir"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
 #: sssd-krb5.5.xml:194
 msgid "%P"
-msgstr ""
+msgstr "%P"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:195
 msgid "the process ID of the sssd client"
-msgstr ""
+msgstr "el ID de proceso del cliente sssd"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:160
@@ -5742,12 +5910,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:209
 msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
+msgstr "Predeterminado: FILE:%d/krb5cc_%U_XXXXXX"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-krb5.5.xml:215
 msgid "krb5_auth_timeout (integer)"
-msgstr ""
+msgstr "krb5_auth_timeout (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:218
@@ -5759,7 +5927,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-krb5.5.xml:241
 msgid "krb5_keytab (string)"
-msgstr ""
+msgstr "krb5_keytab (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:244
@@ -5771,12 +5939,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:248
 msgid "Default: /etc/krb5.keytab"
-msgstr ""
+msgstr "Predeterminado: /etc/krb5.keytab"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-krb5.5.xml:254
 msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
+msgstr "krb5_store_password_if_offline (boolean)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:257
@@ -5796,7 +5964,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-krb5.5.xml:275
 msgid "krb5_renewable_lifetime (string)"
-msgstr ""
+msgstr "krb5_renewable_lifetime (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:278
@@ -5808,22 +5976,22 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
 msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
+msgstr "<emphasis>s</emphasis> segundos"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
 msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
+msgstr "<emphasis>m</emphasis> minutos"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
 msgid "<emphasis>h</emphasis> hours"
-msgstr ""
+msgstr "<emphasis>h</emphasis> horas"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
 msgid "<emphasis>d</emphasis> days."
-msgstr ""
+msgstr "<emphasis>d</emphasis> días."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
@@ -5846,7 +6014,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-krb5.5.xml:311
 msgid "krb5_lifetime (string)"
-msgstr ""
+msgstr "krb5_lifetime (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:314
@@ -5871,7 +6039,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-krb5.5.xml:347
 msgid "krb5_renew_interval (integer)"
-msgstr ""
+msgstr "krb5_renew_interval (entero)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:350
@@ -5888,7 +6056,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-krb5.5.xml:365
 msgid "krb5_use_fast (string)"
-msgstr ""
+msgstr "krb5_use_fast (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:368
@@ -5939,7 +6107,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-krb5.5.xml:400
 msgid "krb5_fast_principal (string)"
-msgstr ""
+msgstr "krb5_fast_principal (cadena)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:403
@@ -5981,6 +6149,10 @@ msgid ""
 "    krb5_server = 192.168.1.1\n"
 "    krb5_realm = EXAMPLE.COM\n"
 msgstr ""
+"    [domain/FOO]\n"
+"    auth_provider = krb5\n"
+"    krb5_server = 192.168.1.1\n"
+"    krb5_realm = EXAMPLE.COM\n"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-krb5.5.xml:453
@@ -5990,16 +6162,20 @@ msgid ""
 "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
 "<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
 msgstr ""
+"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
+"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
+"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
 msgid "sss_groupadd"
-msgstr ""
+msgstr "sss_groupadd"
 
 #. type: Content of: <reference><refentry><refnamediv><refpurpose>
 #: sss_groupadd.8.xml:16
 msgid "create a new group"
-msgstr ""
+msgstr "Crea un nuevo grupo"
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_groupadd.8.xml:21
@@ -6008,6 +6184,9 @@ msgid ""
 "replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
 "arg>"
 msgstr ""
+"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>GRUPO</replaceable></"
+"arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_groupadd.8.xml:32
@@ -6022,6 +6201,7 @@ msgstr ""
 msgid ""
 "<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
 msgstr ""
+"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_groupadd.8.xml:48
@@ -6043,16 +6223,25 @@ msgid ""
 "citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
 "refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
 msgstr ""
+"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
+"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sss_userdel.8.xml:10 sss_userdel.8.xml:15
 msgid "sss_userdel"
-msgstr ""
+msgstr "sss_userdel"
 
 #. type: Content of: <reference><refentry><refnamediv><refpurpose>
 #: sss_userdel.8.xml:16
 msgid "delete a user account"
-msgstr ""
+msgstr "eliminar una cuenta de usuario"
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_userdel.8.xml:21
@@ -6061,6 +6250,9 @@ msgid ""
 "replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
 "arg>"
 msgstr ""
+"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
+"arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_userdel.8.xml:32
@@ -6072,7 +6264,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_userdel.8.xml:44
 msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
+msgstr "<option>-r</option>,<option>--remove</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_userdel.8.xml:48
@@ -6084,7 +6276,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_userdel.8.xml:56
 msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
+msgstr "<option>-R</option>,<option>--no-remove</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_userdel.8.xml:60
@@ -6096,7 +6288,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_userdel.8.xml:68
 msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
+msgstr "<option>-f</option>,<option>--force</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_userdel.8.xml:72
@@ -6108,12 +6300,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_userdel.8.xml:80
 msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
+msgstr "<option>-k</option>,<option>--kick</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_userdel.8.xml:84
 msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
+msgstr "Antes de realmente eliminar al usuario, terminar todos sus procesos."
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_userdel.8.xml:95
@@ -6128,16 +6320,25 @@ msgid ""
 "citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
 "refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
 msgstr ""
+"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
+"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
 msgid "sss_groupdel"
-msgstr ""
+msgstr "sss_groupdel"
 
 #. type: Content of: <reference><refentry><refnamediv><refpurpose>
 #: sss_groupdel.8.xml:16
 msgid "delete a group"
-msgstr ""
+msgstr "eliminar un grupo"
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_groupdel.8.xml:21
@@ -6146,6 +6347,9 @@ msgid ""
 "replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
 "arg>"
 msgstr ""
+"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>GRUPO</replaceable></"
+"arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_groupdel.8.xml:32
@@ -6167,11 +6371,20 @@ msgid ""
 "citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
 "refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
 msgstr ""
+"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
+"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
 msgid "sss_groupshow"
-msgstr ""
+msgstr "sss_groupshow"
 
 #. type: Content of: <reference><refentry><refnamediv><refpurpose>
 #: sss_groupshow.8.xml:16
@@ -6185,6 +6398,9 @@ msgid ""
 "replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
 "arg>"
 msgstr ""
+"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>GRUPO</replaceable></"
+"arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_groupshow.8.xml:32
@@ -6197,7 +6413,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_groupshow.8.xml:43
 msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
+msgstr "<option>-R</option>,<option>--recursive</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_groupshow.8.xml:47
@@ -6219,16 +6435,24 @@ msgid ""
 "<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
 "citerefentry>."
 msgstr ""
+"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
+"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>."
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sss_usermod.8.xml:10 sss_usermod.8.xml:15
 msgid "sss_usermod"
-msgstr ""
+msgstr "sss_usermod"
 
 #. type: Content of: <reference><refentry><refnamediv><refpurpose>
 #: sss_usermod.8.xml:16
 msgid "modify a user account"
-msgstr ""
+msgstr "Modifica una cuenta de usuario"
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_usermod.8.xml:21
@@ -6237,6 +6461,9 @@ msgid ""
 "replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
 "arg>"
 msgstr ""
+"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
+"arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_usermod.8.xml:32
@@ -6249,12 +6476,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_usermod.8.xml:60
 msgid "The home directory of the user account."
-msgstr ""
+msgstr "El directorio principal de la cuenta de usuario."
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_usermod.8.xml:71
 msgid "The user's login shell."
-msgstr ""
+msgstr "Shell de inicio de sesión del usuario."
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_usermod.8.xml:82
@@ -6274,7 +6501,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_usermod.8.xml:103
 msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
+msgstr "<option>-l</option>,<option>--lock</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_usermod.8.xml:107
@@ -6284,7 +6511,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_usermod.8.xml:114
 msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
+msgstr "<option>-u</option>,<option>--unlock</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_usermod.8.xml:118
@@ -6309,6 +6536,15 @@ msgid ""
 "citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
 "refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
 msgstr ""
+"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
+"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sss_cache.8.xml:10 sss_cache.8.xml:15
@@ -6322,18 +6558,10 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_cache.8.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-#| "arg>"
 msgid ""
 "<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
 "replaceable> </arg>"
 msgstr ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_cache.8.xml:31
@@ -6345,15 +6573,9 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:42
-#, fuzzy
-#| msgid ""
-#| "<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-#| "replaceable>"
 msgid ""
 "<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
 msgstr ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:47
@@ -6362,14 +6584,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:53
-#, fuzzy
-#| msgid ""
-#| "<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-#| "replaceable>"
 msgid "<option>-U</option>,<option>--users</option>"
 msgstr ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:57
@@ -6380,15 +6596,9 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:64
-#, fuzzy
-#| msgid ""
-#| "<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-#| "replaceable>"
 msgid ""
 "<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
 msgstr ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:69
@@ -6397,14 +6607,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:75
-#, fuzzy
-#| msgid ""
-#| "<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-#| "replaceable>"
 msgid "<option>-G</option>,<option>--groups</option>"
 msgstr ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:79
@@ -6415,16 +6619,10 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:86
-#, fuzzy
-#| msgid ""
-#| "<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-#| "replaceable>"
 msgid ""
 "<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
 "replaceable>"
 msgstr ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:91
@@ -6433,14 +6631,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:97
-#, fuzzy
-#| msgid ""
-#| "<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-#| "replaceable>"
 msgid "<option>-N</option>,<option>--netgroups</option>"
 msgstr ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:101
@@ -6451,16 +6643,10 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:108
-#, fuzzy
-#| msgid ""
-#| "<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-#| "replaceable>"
 msgid ""
 "<option>-d</option>,<option>--domain</option> <replaceable>domain</"
 "replaceable>"
 msgstr ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:113
@@ -6479,19 +6665,11 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_debuglevel.8.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-#| "arg>"
 msgid ""
 "<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
 "replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
 "replaceable></arg>"
 msgstr ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_debuglevel.8.xml:32
@@ -6523,19 +6701,11 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_ssh_authorizedkeys.1.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-#| "arg>"
 msgid ""
 "<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
 "<replaceable>options</replaceable> </arg> <arg "
 "choice='plain'><replaceable>USER</replaceable></arg>"
 msgstr ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:32
@@ -6599,17 +6769,6 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:98
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
 msgid ""
 "<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
 "citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
@@ -6617,15 +6776,6 @@ msgid ""
 "<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
 "manvolnum> </citerefentry>."
 msgstr ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
@@ -6639,20 +6789,12 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_ssh_knownhostsproxy.1.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-#| "arg>"
 msgid ""
 "<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
 "<replaceable>options</replaceable> </arg> <arg "
 "choice='plain'><replaceable>HOST</replaceable></arg> <arg "
 "choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
 msgstr ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_knownhostsproxy.1.xml:33
@@ -6692,15 +6834,9 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_ssh_knownhostsproxy.1.xml:69
-#, fuzzy
-#| msgid ""
-#| "<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-#| "replaceable>"
 msgid ""
 "<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
 msgstr ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_ssh_knownhostsproxy.1.xml:74
@@ -6717,17 +6853,6 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_knownhostsproxy.1.xml:97
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
 msgid ""
 "<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
 "citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
@@ -6735,20 +6860,11 @@ msgid ""
 "<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
 "manvolnum> </citerefentry>."
 msgstr ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
 
 #. type: Content of: <refsect1><title>
 #: include/service_discovery.xml:2
 msgid "SERVICE DISCOVERY"
-msgstr ""
+msgstr "SERVICIO DE DESCUBRIMIENTO"
 
 #. type: Content of: <refsect1><para>
 #: include/service_discovery.xml:4
@@ -6760,7 +6876,7 @@ msgstr ""
 #. type: Content of: <refsect1><refsect2><title>
 #: include/service_discovery.xml:9
 msgid "Configuration"
-msgstr ""
+msgstr "Configuración"
 
 #. type: Content of: <refsect1><refsect2><para>
 #: include/service_discovery.xml:11
@@ -6777,7 +6893,7 @@ msgstr ""
 #. type: Content of: <refsect1><refsect2><title>
 #: include/service_discovery.xml:23
 msgid "The domain name"
-msgstr ""
+msgstr "El nombre de dominio"
 
 #. type: Content of: <refsect1><refsect2><para>
 #: include/service_discovery.xml:25
@@ -6790,7 +6906,7 @@ msgstr ""
 #. type: Content of: <refsect1><refsect2><title>
 #: include/service_discovery.xml:35
 msgid "The protocol"
-msgstr ""
+msgstr "El protocolo"
 
 #. type: Content of: <refsect1><refsect2><para>
 #: include/service_discovery.xml:37
@@ -6813,7 +6929,7 @@ msgstr ""
 #. type: Content of: outside any tag (error?)
 #: include/upstream.xml:1
 msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
+msgstr "<placeholder type=\"refentryinfo\" id=\"0\"/>"
 
 #. type: Content of: <refsect1><title>
 #: include/failover.xml:2
@@ -6877,12 +6993,12 @@ msgstr ""
 #. type: Content of: <varlistentry><term>
 #: include/param_help.xml:3
 msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
+msgstr "<option>-h</option>,<option>--help</option>"
 
 #. type: Content of: <varlistentry><listitem><para>
 #: include/param_help.xml:7
 msgid "Display help message and exit."
-msgstr ""
+msgstr "Muestra mensaje de ayuda y sale."
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:3
@@ -6993,6 +7109,3 @@ msgid ""
 "<emphasis> This is an experimental feature, please use http://fedorahosted."
 "org/sssd to report any issues.  </emphasis>"
 msgstr ""
-
-#~ msgid "Supported services: nss, pam"
-#~ msgstr "Servicios soportados: nss, pam"
diff --git a/src/man/po/et.po b/src/man/po/et.po
deleted file mode 100644
index 72f7cb2fa..000000000
--- a/src/man/po/et.po
+++ /dev/null
@@ -1,6748 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Estonian (http://www.transifex.net/projects/p/fedora/team/"
-"et/)\n"
-"Language: et\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/fa.po b/src/man/po/fa.po
deleted file mode 100644
index 15b65baad..000000000
--- a/src/man/po/fa.po
+++ /dev/null
@@ -1,6748 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Persian (http://www.transifex.net/projects/p/fedora/team/"
-"fa/)\n"
-"Language: fa\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=1; plural=0\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/fi.po b/src/man/po/fi.po
deleted file mode 100644
index 78926a60c..000000000
--- a/src/man/po/fi.po
+++ /dev/null
@@ -1,6748 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Finnish (http://www.transifex.net/projects/p/fedora/team/"
-"fi/)\n"
-"Language: fi\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/fr.po b/src/man/po/fr.po
index d7668dcf4..15acaa078 100644
--- a/src/man/po/fr.po
+++ b/src/man/po/fr.po
@@ -4,13 +4,14 @@
 #
 # Translators:
 # Fabien Archambault <marbolangos@gmail.com>, 2012.
+#   <sgallagh@redhat.com>, 2012.
 msgid ""
 msgstr ""
 "Project-Id-Version: SSSD\n"
 "Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
 "POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2012-02-23 12:50+0000\n"
-"Last-Translator: Fabien Archambault <marbolangos@gmail.com>\n"
+"PO-Revision-Date: 2012-03-12 20:08+0000\n"
+"Last-Translator: sgallagh <sgallagh@redhat.com>\n"
 "Language-Team: French <trans-fr@lists.fedoraproject.org>\n"
 "Language: fr\n"
 "MIME-Version: 1.0\n"
@@ -395,10 +396,9 @@ msgid ""
 "manvolnum> </citerefentry>-compatible format that describes how to translate "
 "a (name, domain) tuple into a fully qualified name."
 msgstr ""
-"Un format compatible &lt;citerefentry&gt; &lt;refentrytitle&gt;printf&lt;/"
-"refentrytitle&gt; &lt;manvolnum&gt;3&lt;/manvolnum&gt; &lt;/citerefentry&gt; "
-"décrivant la traduction (nom, domaine) d'un tuple en un domaine totalement "
-"qualifé."
+"Un format compatible <citerefentry> <refentrytitle>printf</refentrytitle> "
+"<manvolnum>3</manvolnum> </citerefentry> décrivant la traduction (nom, "
+"domaine) d'un tuple en un domaine totalement qualifé."
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:157
@@ -1139,20 +1139,11 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:662
-#, fuzzy
-#| msgid ""
-#| "Specifies for how many seconds nss_sss should cache negative cache hits "
-#| "(that is, queries for invalid database entries, like nonexistent ones)  "
-#| "before asking the back end again."
 msgid ""
 "Specifies for how many seconds should the autofs responder negative cache "
 "hits (that is, queries for invalid map entries, like nonexistent ones) "
 "before asking the back end again."
 msgstr ""
-"Spécifie le temps, en secondes, pendant lequel nss_sss doit mettre en cache "
-"les résultats négatifs du cache (c'est-à-dire les requêtes pour les bases de "
-"données invalides, comme celles qui n'existent pas) avant d'appeler à "
-"nouveau l'arrière plan."
 
 #. type: Content of: <reference><refentry><refsect1><title>
 #: sssd.conf.5.xml:679
@@ -3528,10 +3519,9 @@ msgid ""
 "certificate is provided, the session proceeds normally. If a bad certificate "
 "is provided, it will be ignored and the session proceeds normally."
 msgstr ""
-"&lt;emphasis&gt;allow&lt;/emphasis&gt; : le certificat serveur est demandé. "
-"Si aucun certificat n'est fournit, la session continue normalement. Si un "
-"mauvais certificat est fournit, il est ignoré et la session continue "
-"normalement."
+"<emphasis>allow</emphasis> : le certificat serveur est demandé. Si aucun "
+"certificat n'est fournit, la session continue normalement. Si un mauvais "
+"certificat est fournit, il est ignoré et la session continue normalement."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1157
@@ -3551,9 +3541,9 @@ msgid ""
 "certificate is provided, or a bad certificate is provided, the session is "
 "immediately terminated."
 msgstr ""
-"&lt;emphasis&gt;demand&lt;/emphasis&gt; : le certificat serveur est demandé. "
-"Si aucun certificat ou un mauvais certificat est fournit, la session se "
-"termine immédiatement."
+"<emphasis>demand</emphasis> : le certificat serveur est demandé. Si aucun "
+"certificat ou un mauvais certificat est fournit, la session se termine "
+"immédiatement."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1169
@@ -4403,20 +4393,12 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ldap.5.xml:1815
-#, fuzzy
-#| msgid ""
-#| "Specifies acceptable cipher suites.  Typically this is a colon sperated "
-#| "list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-#| "<manvolnum>5</manvolnum></citerefentry> for format."
 msgid ""
 "This manual page only describes attribute name mapping.  For detailed "
 "explanation of sudo related attribute semantics, see <citerefentry> "
 "<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
 "citerefentry>"
 msgstr ""
-"Définit les fluxs de chiffrement acceptables. Usuellement c'est une liste "
-"séparée par des deux-points. Voir <citerefentry><refentrytitle>ldap.conf</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> pour le format."
 
 #. type: Content of: <reference><refentry><refsect1><title>
 #: sssd-ldap.5.xml:1825
@@ -4708,8 +4690,8 @@ msgid ""
 "<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
 "fedorahosted.org/sssd</orgname>"
 msgstr ""
-"&lt;productname&gt;SSSD&lt;/productname&gt; &lt;orgname&gt;Le projet SSSD - "
-"http://fedorahosted.org/sssd&lt;/orgname&gt;"
+"<productname>SSSD</productname> <orgname>Le projet SSSD - http://"
+"fedorahosted.org/sssd</orgname>"
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: pam_sss.8.xml:13 pam_sss.8.xml:18
@@ -6478,9 +6460,9 @@ msgstr ""
 "%d et %P. Si le dossier n'existe pas il sera créé. Si %u, %U, %p ou %h sont "
 "utilisés un répertoire privé appartenant à l'utilisateur est créé. Sinon un "
 "répertoire public avec un drapeau de restriction à la suppression (aussi "
-"appelé « sticky bit », voir &lt;citerefentry&gt; &lt;refentrytitle&gt;"
-"chmod&lt;/refentrytitle&gt; &lt;manvolnum&gt;1&lt;/manvolnum&gt; &lt;/"
-"citerefentry&gt; pour plus de détails) est créé."
+"appelé « sticky bit », voir <citerefentry> <refentrytitle>chmod</"
+"refentrytitle> <manvolnum>1</manvolnum> </citerefentry> pour plus de "
+"détails) est créé."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:151
@@ -7220,10 +7202,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sss_cache.8.xml:10 sss_cache.8.xml:15
-#, fuzzy
-#| msgid "sss_obfuscate"
 msgid "sss_cache"
-msgstr "sss_obfuscate"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refnamediv><refpurpose>
 #: sss_cache.8.xml:16
@@ -7232,16 +7212,10 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_cache.8.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg>"
 msgid ""
 "<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
 "replaceable> </arg>"
 msgstr ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_cache.8.xml:31
@@ -7253,13 +7227,9 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:42
-#, fuzzy
-#| msgid ""
-#| "<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
 msgid ""
 "<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
 msgstr ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:47
@@ -7268,10 +7238,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:53
-#, fuzzy
-#| msgid "<option>-h</option>,<option>--help</option>"
 msgid "<option>-U</option>,<option>--users</option>"
-msgstr "<option>-h</option>,<option>--help</option>"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:57
@@ -7282,15 +7250,9 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:64
-#, fuzzy
-#| msgid ""
-#| "<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-#| "replaceable>"
 msgid ""
 "<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
 msgstr ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPES</"
-"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:69
@@ -7299,10 +7261,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:75
-#, fuzzy
-#| msgid "<option>-r</option>,<option>--remove</option>"
 msgid "<option>-G</option>,<option>--groups</option>"
-msgstr "<option>-r</option>,<option>--remove</option>"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:79
@@ -7313,16 +7273,10 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:86
-#, fuzzy
-#| msgid ""
-#| "<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-#| "replaceable>"
 msgid ""
 "<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
 "replaceable>"
 msgstr ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPES</"
-"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:91
@@ -7331,10 +7285,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:97
-#, fuzzy
-#| msgid "<option>-h</option>,<option>--help</option>"
 msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr "<option>-h</option>,<option>--help</option>"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:101
@@ -7345,16 +7297,10 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:108
-#, fuzzy
-#| msgid ""
-#| "<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-#| "replaceable>"
 msgid ""
 "<option>-d</option>,<option>--domain</option> <replaceable>domain</"
 "replaceable>"
 msgstr ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAINE</"
-"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:113
@@ -7363,10 +7309,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-#, fuzzy
-#| msgid "sss_userdel"
 msgid "sss_debuglevel"
-msgstr "sss_userdel"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refnamediv><refpurpose>
 #: sss_debuglevel.8.xml:16
@@ -7375,19 +7319,11 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_debuglevel.8.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-#| "arg>"
 msgid ""
 "<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
 "replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
 "replaceable></arg>"
 msgstr ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_debuglevel.8.xml:32
@@ -7419,30 +7355,14 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_ssh_authorizedkeys.1.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-#| "arg>"
 msgid ""
 "<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
 "<replaceable>options</replaceable> </arg> <arg "
 "choice='plain'><replaceable>USER</replaceable></arg>"
 msgstr ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:32
-#, fuzzy
-#| msgid ""
-#| "This manual page describes the configuration of LDAP domains for "
-#| "<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</"
-#| "manvolnum> </citerefentry>.  Refer to the <quote>FILE FORMAT</quote> "
-#| "section of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-#| "<manvolnum>5</manvolnum> </citerefentry> manual page for detailed syntax "
-#| "information."
 msgid ""
 "<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
 "<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
@@ -7450,21 +7370,9 @@ msgid ""
 "<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
 "citerefentry> for more information)."
 msgstr ""
-"Ce manuel décrit la configuration des domaines LDAP pour <citerefentry> "
-"<refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> </"
-"citerefentry>. Se référer à la section <quote>FILE FORMAT</quote> du manuel "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> pour des informations sur la syntaxe détaillée."
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:41
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>"
 msgid ""
 "<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
 "citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
@@ -7473,10 +7381,6 @@ msgid ""
 "quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
 "<manvolnum>5</manvolnum></citerefentry> options."
 msgstr ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
 
 #. type: Content of: <reference><refentry><refsect1><para><programlisting>
 #: sss_ssh_authorizedkeys.1.xml:58
@@ -7486,14 +7390,6 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:51
-#, fuzzy
-#| msgid ""
-#| "This manual page describes the configuration of LDAP domains for "
-#| "<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</"
-#| "manvolnum> </citerefentry>.  Refer to the <quote>FILE FORMAT</quote> "
-#| "section of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-#| "<manvolnum>5</manvolnum> </citerefentry> manual page for detailed syntax "
-#| "information."
 msgid ""
 "If <quote>AuthorizedKeysCommand</quote> is supported, "
 "<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
@@ -7501,11 +7397,6 @@ msgid ""
 "in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
 "manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
 msgstr ""
-"Ce manuel décrit la configuration des domaines LDAP pour <citerefentry> "
-"<refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> </"
-"citerefentry>. Se référer à la section <quote>FILE FORMAT</quote> du manuel "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> pour des informations sur la syntaxe détaillée."
 
 #. type: Content of: <reference><refentry><refsect1><para><programlisting>
 #: sss_ssh_authorizedkeys.1.xml:69
@@ -7515,14 +7406,6 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:62
-#, fuzzy
-#| msgid ""
-#| "This manual page describes the configuration of LDAP domains for "
-#| "<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</"
-#| "manvolnum> </citerefentry>.  Refer to the <quote>FILE FORMAT</quote> "
-#| "section of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-#| "<manvolnum>5</manvolnum> </citerefentry> manual page for detailed syntax "
-#| "information."
 msgid ""
 "If <quote>PubkeyAgent</quote> is supported, "
 "<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
@@ -7531,11 +7414,6 @@ msgid ""
 "manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
 "\" id=\"0\"/>"
 msgstr ""
-"Ce manuel décrit la configuration des domaines LDAP pour <citerefentry> "
-"<refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> </"
-"citerefentry>. Se référer à la section <quote>FILE FORMAT</quote> du manuel "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> pour des informations sur la syntaxe détaillée."
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_ssh_authorizedkeys.1.xml:87
@@ -7545,13 +7423,6 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:98
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>"
 msgid ""
 "<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
 "citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
@@ -7559,10 +7430,6 @@ msgid ""
 "<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
 "manvolnum> </citerefentry>."
 msgstr ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
@@ -7576,20 +7443,12 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_ssh_knownhostsproxy.1.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-#| "arg>"
 msgid ""
 "<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
 "<replaceable>options</replaceable> </arg> <arg "
 "choice='plain'><replaceable>HOST</replaceable></arg> <arg "
 "choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
 msgstr ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_knownhostsproxy.1.xml:33
@@ -7619,13 +7478,6 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_knownhostsproxy.1.xml:48
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>"
 msgid ""
 "<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
 "citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
@@ -7633,22 +7485,12 @@ msgid ""
 "<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
 "citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
 msgstr ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_ssh_knownhostsproxy.1.xml:69
-#, fuzzy
-#| msgid ""
-#| "<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-#| "replaceable>"
 msgid ""
 "<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
 msgstr ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENTAIRE</"
-"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_ssh_knownhostsproxy.1.xml:74
@@ -7665,13 +7507,6 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_knownhostsproxy.1.xml:97
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>"
 msgid ""
 "<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
 "citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
@@ -7679,10 +7514,6 @@ msgid ""
 "<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
 "manvolnum> </citerefentry>."
 msgstr ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
 
 #. type: Content of: <refsect1><title>
 #: include/service_discovery.xml:2
@@ -7833,10 +7664,8 @@ msgstr ""
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:8
-#, fuzzy
-#| msgid "Currently sssd supports the following values:"
 msgid "Currently supported debug levels:"
-msgstr "Actuellement sssd supporte les valeurs :"
+msgstr ""
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:11
@@ -7869,36 +7698,24 @@ msgstr ""
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:28
-#, fuzzy
-#| msgid "<emphasis>2</emphasis>: show informational messages"
 msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr "<emphasis>2</emphasis> : afficher les messages d'information"
+msgstr ""
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:31
-#, fuzzy
-#| msgid "<emphasis>s</emphasis> seconds"
 msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr "<emphasis>s</emphasis> secondes"
+msgstr ""
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:34
-#, fuzzy
-#| msgid "<emphasis>3</emphasis>: show all messages and debug information"
 msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
 msgstr ""
-"<emphasis>3</emphasis> : afficher tous les messages et informations de "
-"débogage"
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:37
-#, fuzzy
-#| msgid "<emphasis>3</emphasis>: show all messages and debug information"
 msgid ""
 "<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
 msgstr ""
-"<emphasis>3</emphasis> : afficher tous les messages et informations de "
-"débogage"
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:40
@@ -7909,12 +7726,8 @@ msgstr ""
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:43
-#, fuzzy
-#| msgid "<emphasis>3</emphasis>: show all messages and debug information"
 msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
 msgstr ""
-"<emphasis>3</emphasis> : afficher tous les messages et informations de "
-"débogage"
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:46
diff --git a/src/man/po/he.po b/src/man/po/he.po
deleted file mode 100644
index 6f8dee9b9..000000000
--- a/src/man/po/he.po
+++ /dev/null
@@ -1,6747 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Hebrew <he-users@lists.fedoraproject.org>\n"
-"Language: he\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/hi.po b/src/man/po/hi.po
deleted file mode 100644
index 43cae19af..000000000
--- a/src/man/po/hi.po
+++ /dev/null
@@ -1,6747 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2012-02-14 13:10+0000\n"
-"Last-Translator: sgallagh <sgallagh@redhat.com>\n"
-"Language-Team: Hindi <indlinux-hindi@lists.sourceforge.net>\n"
-"Language: hi\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/hu.po b/src/man/po/hu.po
deleted file mode 100644
index cadd35387..000000000
--- a/src/man/po/hu.po
+++ /dev/null
@@ -1,6747 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Hungarian <trans-hu@lists.fedoraproject.org>\n"
-"Language: hu\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/id.po b/src/man/po/id.po
deleted file mode 100644
index c2d495cd2..000000000
--- a/src/man/po/id.po
+++ /dev/null
@@ -1,6747 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Indonesian <trans-id@lists.fedoraproject.org>\n"
-"Language: id\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=1; plural=0\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/it.po b/src/man/po/it.po
deleted file mode 100644
index f38818dba..000000000
--- a/src/man/po/it.po
+++ /dev/null
@@ -1,6747 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Italian <trans-it@lists.fedoraproject.org>\n"
-"Language: it\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/ja.po b/src/man/po/ja.po
index 85f747a91..f3794f923 100644
--- a/src/man/po/ja.po
+++ b/src/man/po/ja.po
@@ -11,7 +11,7 @@ msgstr ""
 "Project-Id-Version: SSSD\n"
 "Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
 "POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2012-02-28 13:11+0000\n"
+"PO-Revision-Date: 2012-03-09 23:57+0000\n"
 "Last-Translator: Tomoyuki KATO <tomo@dream.daynight.jp>\n"
 "Language-Team: Japanese <trans-ja@lists.fedoraproject.org>\n"
 "Language: ja\n"
@@ -467,6 +467,8 @@ msgid ""
 "This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
 "SSSD to let libkrb5 decide the appropriate location for the replay cache."
 msgstr ""
+"��オプション��libkrb5 �リプレイキャッシュ�対�る�切�場所を決�られる"
+"よ� SSSD �指示�る�特別�値 __LIBKRB5_DEFAULTS__ を��付���。"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:203
@@ -696,6 +698,10 @@ msgid ""
 "domain or include fully-qualified names to filter only users from the "
 "particular domain."
 msgstr ""
+"sss NSS データベース�ら�り出�れ�も��ら特定�ユーザーを除外���。�れ"
+"����システムアカウント�対��有効��。��オプション�ドメイン���設"
+"定����。���特定�ドメイン�らユーザー��をフィルター�る���完全修"
+"飾�を��る�������。"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:364
@@ -777,6 +783,9 @@ msgid ""
 "or a template. In the template, the following sequences are substituted: "
 "<placeholder type=\"variablelist\" id=\"0\"/>"
 msgstr ""
+"ユーザー�ホームディレクトリーを上書����。絶対パス���テンプレートを�"
+"供����。テンプレート���以下�シーケンス�置��れ��: <placeholder "
+"type=\"variablelist\" id=\"0\"/>"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:413
@@ -831,6 +840,9 @@ msgid ""
 "The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
 "that a restart of the SSSD is required in case a new shell is installed."
 msgstr ""
+"<quote>/etc/shells</quote> � SSSD �開始�れる�����読�込�れ��。�れ"
+"�新��シェル�インストール�れ�場� SSSD ��起動�必���る��を�味�"
+"��。"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:445
@@ -932,6 +944,9 @@ msgid ""
 "offline_failed_login_attempts has been reached. Only a successful online "
 "authentication can enable offline authentication again."
 msgstr ""
+"0 �設定�れ��る��offline_failed_login_attempts ����場��ユーザー�"
+"オフライン�証����ん。オンライン�証��功�る����オフライン�証を有"
+"効�����。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
@@ -994,6 +1009,8 @@ msgid ""
 "immediately update the cached identity information for the user in order to "
 "ensure that authentication takes place with the latest information."
 msgstr ""
+"SSSD �オンライン�間����� PAM �求�対���ユーザー�最新�情報��証"
+"�れるよ��SSSD �直��キャッシュ�れ�識別情報を更新�よ�����。"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:565
@@ -1003,6 +1020,10 @@ msgid ""
 "client-application basis) how long (in seconds) we can cache the identity "
 "information to avoid excessive round-trips to the identity provider."
 msgstr ""
+"完全� PAM �やり�り��アカウント管�やセッション開始�よ���複数� PAM "
+"�求を実行����。��オプション��識別プロ�イダー�対�る�剰�ラウンド"
+"トリップを��る���識別情報をキャッシュ��る時間（秒数）を（クライアント"
+"アプリケーション���）制御���。"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:579
@@ -1021,6 +1042,8 @@ msgid ""
 "expiration time of the password.  If this information is missing, sssd "
 "cannot display a warning."
 msgstr ""
+"�ックエンド�サー�ー�パスワード�有効期間�関�る情報を�供�る必���る"
+"���注�������。��情報���れ��sssd �警告を表示���。"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:591
@@ -1049,6 +1072,8 @@ msgid ""
 "to update the cached rules in order to ensure that sudo has the latest "
 "ruleset."
 msgstr ""
+"SSSD �オンライン�間����� sudo �求�対���sudo �確実�最新�ルール"
+"セットを��よ��SSSD �キャッシュ�れ�ルールを更新�よ�����。"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:617
@@ -1058,6 +1083,9 @@ msgid ""
 "the sudo service maintains an in-memory cache that would be used for "
 "performing fast replies."
 msgstr ""
+"�����ら�ユーザー�複数� sudo コマンドを正常�実行����。�れ�複数"
+"� LDAP �求を発行���。��使用法を高速化�る����sudo サービス�素早�"
+"応答を返����使用�れるインメモリーキャッシュを�����。"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:624
@@ -1065,6 +1093,8 @@ msgid ""
 "This option controls how long (in seconds) can the sudo service cache rules "
 "for a user."
 msgstr ""
+"��オプション� sudo サービス�ユーザー�ルールをキャッシュ��る時間（秒�"
+"�）を制御���。"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:628
@@ -1082,6 +1112,8 @@ msgid ""
 "Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
 "that implement time-dependent sudoers entries."
 msgstr ""
+"時間�存� sudoers エントリーを実装�る sudoNotBefore � sudoNotAfter �属性"
+"を評価�る�������。"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><title>
 #: sssd.conf.5.xml:649
@@ -1100,19 +1132,14 @@ msgstr "autofs_negative_timeout (æ•´æ•°)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:662
-#, fuzzy
-#| msgid ""
-#| "Specifies for how many seconds nss_sss should cache negative cache hits "
-#| "(that is, queries for invalid database entries, like nonexistent ones)  "
-#| "before asking the back end again."
 msgid ""
 "Specifies for how many seconds should the autofs responder negative cache "
 "hits (that is, queries for invalid map entries, like nonexistent ones) "
 "before asking the back end again."
 msgstr ""
-"nss_sss ����ックエンド������る���ガティブキャッシュヒット（��"
-"り�存在���ドメイン�よ���無効�データベースエントリー�対�る����"
-"�）をキャッシュ�る秒数を指定���。"
+"autofs レス�ンダー��ガティブキャッシュ（��り�存在���も��よ���無"
+"効�マップエントリー�対�る�����）����ックエンド������る��"
+"ヒット�る秒数を指定���。"
 
 #. type: Content of: <reference><refentry><refsect1><title>
 #: sssd.conf.5.xml:679
@@ -1141,6 +1168,9 @@ msgid ""
 "primary group memberships, those that are in range will be reported as "
 "expected."
 msgstr ""
+"ユーザー�対����れ�プライマリー GID 制��影響���。 UID ���プライ"
+"マリー GID �範囲外�ら��ユーザー� NSS �返�れ��ん。�プライマリーメン"
+"�ー�対���範囲内��るも��予期�れ�も����報告�れ��。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:701
@@ -1158,6 +1188,8 @@ msgid ""
 "Timeout in seconds between heartbeats for this domain.  This is used to "
 "ensure that the backend process is alive and capable of answering requests."
 msgstr ""
+"��ドメイン�対�る�ートビート間隔（秒��）。�ックエンド�プロセス�有効"
+"��り��求�答�られる能力��る��を確実��る���使用�れ��。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
@@ -1175,6 +1207,8 @@ msgid ""
 "Determines if a domain can be enumerated. This parameter can have one of the "
 "following values:"
 msgstr ""
+"ドメイン�列挙��る�を決定���。��パラメーター�以下�値��れ���る"
+"必���り��:"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:728
@@ -1200,6 +1234,10 @@ msgid ""
 "information will go directly to LDAP, though it may be slow, due to the "
 "heavy enumeration processing."
 msgstr ""
+"注: 列挙を有効��る���より�列挙�実行中� SSSD �����性能�影響��"
+"り��。列挙を完全�完了�る�� SSSD �開始後�数分間時間���り��。��"
+"間���れ�れ�情報��求�直接 LDAP �行�������列挙処������れ"
+"����も�れ��ん。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:747
@@ -1207,6 +1245,8 @@ msgid ""
 "While the first enumeration is running, requests for the complete user or "
 "group lists may return no results until it completes."
 msgstr ""
+"最��列挙�実行中�間�完全�ユーザー���グループ�一覧�対�る�求���"
+"れ�完了�る���果を返���ん。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:752
@@ -1216,6 +1256,10 @@ msgid ""
 "enumeration lookups are completed successfully.  For more information, refer "
 "to the man pages for the specific id_provider in use."
 msgstr ""
+"�ら��列挙を有効��る���より�挙�検索�確実�正��完了�るよりも長�"
+"�る必���る����ットワーク切断を検知�る���必��時間�増�る�能性"
+"��り��。詳細�使用���る具体的� id_provider �マニュアルページを�照�"
+"�����。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:763
@@ -1228,6 +1272,8 @@ msgid ""
 "How many seconds should nss_sss consider entries valid before asking the "
 "backend again"
 msgstr ""
+"nss_sss ����ックエンド������る��エントリーを有効��る�考�る秒"
+"数��。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:770
@@ -1305,6 +1351,8 @@ msgstr "cache_credentials (論�値)"
 #: sssd.conf.5.xml:831
 msgid "Determines if user credentials are also cached in the local LDB cache"
 msgstr ""
+"ユーザー�クレディンシャル�ローカル LDB キャッシュ�キャッシュ�れる����"
+"を決���"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:835
@@ -1325,6 +1373,9 @@ msgid ""
 "value of this parameter must be greater than or equal to "
 "offline_credentials_expiration."
 msgstr ""
+"正常�ログイン後�キャッシュ�クリーンアップ中�エントリー�削除�れる��日"
+"数��。 0 �永久����る��を�味���。��パラメーター�値� "
+"offline_credentials_expiration ��等以上���れ�����ん。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:854
@@ -1340,6 +1391,7 @@ msgstr "id_provider (文字列)"
 #: sssd.conf.5.xml:863
 msgid "The Data Provider identity backend to use for this domain."
 msgstr ""
+"��ドメイン�対��使用�るデータプロ�イダー�識別情報��ックエンド��。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:867
@@ -1374,6 +1426,10 @@ msgid ""
 "<command>getent passwd test</command> wouldn't find the user while "
 "<command>getent passwd test@LOCAL</command> would."
 msgstr ""
+"TRUE �設定�れ��る����ドメイン�������求�完全修飾�を使用�る必"
+"���り��。����� \"test\" ユーザーを�む LOCAL ドメイン����使用�"
+"れ��る��<command>getent passwd test</command> �ユーザーを見��られ��"
+"ん��<command>getent passwd test@LOCAL</command> �見��られ��。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:898
@@ -1466,6 +1522,10 @@ msgid ""
 "manvolnum></citerefentry> for more information on configuring the simple "
 "access module."
 msgstr ""
+"<quote>simple</quote> アクセス制御�アクセス���拒��一覧�基����。"
+"simple アクセスモジュール�設定�関�る詳細� <citerefentry> "
+"<refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</manvolnum></"
+"citerefentry> を�照������。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:953
@@ -1483,6 +1543,8 @@ msgid ""
 "The provider which should handle change password operations for the domain.  "
 "Supported change password providers are:"
 msgstr ""
+"ドメイン�対�るパスワード変更�作を�り扱�プロ�イダー��。サ�ート�れる"
+"パスワード変更プロ�イダー�次���り��:"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:966
@@ -1624,6 +1686,8 @@ msgid ""
 "Provides the ability to select preferred address family to use when "
 "performing DNS lookups."
 msgstr ""
+"DNS 検索を実行�る���使用�る�優先アドレスファミリーを�択�る機能を�供"
+"���。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1063
@@ -1671,6 +1735,9 @@ msgid ""
 "resolver before assuming that it is unreachable. If this timeout is reached, "
 "the domain will continue to operate in offline mode."
 msgstr ""
+"DNS リゾル�ー�到���能��る�仮定�る�������ら�応答を待�時間"
+"（秒��）を定義���。��タイムアウト���る��ドメイン�オフラインモー"
+"ド���作を継続���。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1099
@@ -1683,6 +1750,8 @@ msgid ""
 "If service discovery is used in the back end, specifies the domain part of "
 "the service discovery DNS query."
 msgstr ""
+"サービス検索��ックエンド�使用�れ��る��サービス検索 DNS クエリー�ドメ"
+"イン部分を指定���。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1106
@@ -1710,6 +1779,8 @@ msgid ""
 "Treat user and group names as case sensitive. At the moment, this option is "
 "not supported in the local provider."
 msgstr ""
+"ユーザー��グループ��大文字�文字を区別�るよ��り扱���。今�����"
+"��オプション�ローカルプロ�イダー����サ�ート�れ��ん。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1129
@@ -1723,6 +1794,9 @@ msgid ""
 "section, that is, in a section called <quote>[domain/<replaceable>NAME</"
 "replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
 msgstr ""
+"�れら�設定オプション�ドメイン設定�セクション���り <quote>[domain/"
+"<replaceable>NAME</replaceable>]</quote> �存在��� <placeholder type="
+"\"variablelist\" id=\"0\"/>"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1141
@@ -1740,6 +1814,8 @@ msgid ""
 "Default: not set by default, you have to take an existing pam configuration "
 "or create a new one and add the service name here."
 msgstr ""
+"�期値: 設定�れ��ん。既存� PAM 設定を使用�る��新��作���サービス�"
+"を���追加�る必���り��。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1155
@@ -1753,6 +1829,9 @@ msgid ""
 "searched for in the library are in the form of _nss_$(libName)_$(function), "
 "for example _nss_files_getpwent."
 msgstr ""
+"プロキシードメイン����使用�る NSS ライブラリー�����。ライブラリー�"
+"���検索�る NSS 関数� _nss_$(libName)_$(function) �形���。���� "
+"_nss_files_getpwent ��。"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd.conf.5.xml:1137
@@ -1902,6 +1981,9 @@ msgid ""
 "corresponding user account is modified or deleted.  If not specified, a "
 "default value is used."
 msgstr ""
+"メールスプールディレクトリー��。�れ�対応�るユーザーアカウント�変更��"
+"�削除�れ�����れを�作�る必���り��。指定�れ����れ���期値"
+"�使用�れ��。"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1272
@@ -1920,6 +2002,9 @@ msgid ""
 "username of the user being removed as the first and only parameter. The "
 "return code of the command is not taken into account."
 msgstr ""
+"ユーザー�削除後�実行�れるコマンド��。コマンド�最��唯一�パラメーター"
+"���削除�れるユーザー�ユーザー�を渡���。コマンド�返り値�考慮�れ�"
+"�ん。"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1286
@@ -1994,6 +2079,9 @@ msgid ""
 "configuring domains for more details.  <placeholder type=\"programlisting\" "
 "id=\"0\"/>"
 msgstr ""
+"以下�例� SSSD �一般的�設定を示���。ドメイン自身�設定を説明�����"
+"ん - ドメイン�設定�関�る詳細�ドキュメントを�照������。  "
+"<placeholder type=\"programlisting\" id=\"0\"/>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd.conf.5.xml:1333
@@ -2042,6 +2130,11 @@ msgid ""
 "<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
 "manvolnum> </citerefentry> manual page for detailed syntax information."
 msgstr ""
+"��マニュアルページ� <citerefentry> <refentrytitle>sssd</refentrytitle> "
+"<manvolnum>8</manvolnum> </citerefentry> ��� LDAP ドメイン�設定を説明��"
+"���。詳細�構文����� <citerefentry> <refentrytitle>sssd.conf</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> マニュアルページ� "
+"<quote>ファイル形�</quote> セクションを�照������。"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ldap.5.xml:35
@@ -2059,6 +2152,13 @@ msgid ""
 "<quote>ldap_access_filter</quote> config option for more information about "
 "using LDAP as an access provider."
 msgstr ""
+"LDAP �ックエンド� id, auth, access �よ� chpass プロ�イダーをサ�ート��"
+"�。 LDAP サー�ー�対���証���れ�� TLS/SSL ��� LDAPS ���ら��"
+"必���り��。 <command>sssd</command> �暗�化�れ���ャ�ル���る�証"
+"�サ�ート<emphasis>�れ��ん</emphasis>。 LDAP サー�ー�識別プロ�イダー�"
+"����使用�れる�ら��暗�化�ャ�ル�必��り��ん。アクセスプロ�イ"
+"ダー��� LDAP を使用�る���詳細� <quote>ldap_access_filter</quote> 設定"
+"オプションを�照������。"
 
 #. type: Content of: <reference><refentry><refsect1><title>
 #: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
@@ -2228,6 +2328,14 @@ msgid ""
 "members are listed by DN and stored in the <emphasis>member</emphasis> "
 "attribute."
 msgstr ""
+"ターゲット LDAP サー�ー����使用中�スキーマ形�を指定���。�択�れ�"
+"スキーマ�応���サー�ー�ら�得�れる属性���期変�り��。処��れる�"
+"����属性も変�り��。�在 3 ��スキーマ形��サ�ート�れ��: "
+"rfc2307, rfc2307bis, IPA 。�れら�スキーマ形���も�����グループ�メン"
+"�ー�サー�ー������よ��記録�れる���。rfc2307 を使用�る��グ"
+"ループ�メン�ー� <emphasis>memberUid</emphasis> 属性����より一覧化�れ"
+"��。rfc2307bis �よ� IPA を使用�る��グループ�メン�ー� DN �より一覧"
+"化�れ�<emphasis>member</emphasis> 属性��存�れ��。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:180
@@ -2785,6 +2893,9 @@ msgid ""
 "with no members and users who have never logged in) and remove them to save "
 "space."
 msgstr ""
+"使用�����エントリー（メン�ー����グループやログイン�������"
+"ユーザー��）�対��キャッシュを確�����存領域を節約�る����れらを"
+"削除�る間隔を決���。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:631
@@ -2870,6 +2981,9 @@ msgid ""
 "presence of the host attribute in the user's LDAP entry to determine access "
 "privilege."
 msgstr ""
+"access_provider=ldap �� ldap_access_order=host �ら�� SSSD �アクセス権�"
+"を決�る����ユーザー� LDAP エントリー��るホスト属性�存在を使用��"
+"�。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:697
@@ -2877,6 +2991,8 @@ msgid ""
 "An explicit deny (!host) is resolved first. Second, SSSD searches for "
 "explicit allow (host) and finally for allow_all (*)."
 msgstr ""
+"明示的�拒� (!host) ���解決�れ��。次� SSSD �明示的�許� (host) を検"
+"索���。最後����許� (*) �検索�れ��。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:702
@@ -2960,6 +3076,9 @@ msgid ""
 "RFC2307bis), then this option controls how many levels of nesting SSSD will "
 "follow. This option has no effect on the RFC2307 schema."
 msgstr ""
+"ldap_schema �入れ�グループ (例: RFC2307bis) をサ�ート�るスキーマ形��設"
+"定�れ��る����オプション�入れ� SSSD �����レベルを制御���。�"
+"�オプション� RFC2307 スキーマ����効果��り��ん。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:795
@@ -3175,6 +3294,9 @@ msgid ""
 "will likely be replaced at some point by a series of timeouts for specific "
 "lookup types."
 msgstr ""
+"注: ��オプション� SSSD �将���ージョン����変更�れる�能性��り�"
+"�。特定�種類�検索����一連�タイムアウト�より�る時点�置���られる"
+"�も�れ��ん。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
@@ -3214,6 +3336,11 @@ msgid ""
 "<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
 "citerefentry> returns in case of no activity."
 msgstr ""
+"<citerefentry> <refentrytitle>connect</refentrytitle> <manvolnum>2</"
+"manvolnum> </citerefentry> �続�� <citerefentry> <refentrytitle>poll</"
+"refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/<citerefentry> "
+"<refentrytitle>select</refentrytitle> <manvolnum>2</manvolnum> </"
+"citerefentry> �未使用を返��後�タイムアウト（秒��）を指定���。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1033
@@ -3227,6 +3354,8 @@ msgid ""
 "will abort if no response is received. Also controls the timeout when "
 "communicating with the KDC in case of SASL bind."
 msgstr ""
+"�期 LDAP API を呼�出��未応答�場��中止�れ�後�タイムアウト（秒��）"
+"を指定���。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1048
@@ -3258,6 +3387,8 @@ msgid ""
 "Specify the number of records to retrieve from LDAP in a single request. "
 "Some LDAP servers enforce a maximum limit per-request."
 msgstr ""
+"1 回��求� LDAP �ら�得�るレコード数を指定���。����� LDAP サー"
+"�ー� 1 �求��り�最大数�制�を強制���。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1073
@@ -3297,6 +3428,9 @@ msgid ""
 "a time on a single connection. On busy clients, this can result in some "
 "requests being denied."
 msgstr ""
+"例: 389 DS ��一�接続�����時� 1 ��ページ制御��をサ�ート���。"
+"負��高�クライアント������������求�拒��れる�果��る�能性"
+"��り��。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1103
@@ -3345,6 +3479,8 @@ msgid ""
 "Specifies what checks to perform on server certificates in a TLS session, if "
 "any. It can be specified as one of the following values:"
 msgstr ""
+"も��れ�� TLS セッション����サー�ー証明書����実行�る����ェッ"
+"ク�るも�を指定���。以下�値��� 1 �を指定����:"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1146
@@ -3352,6 +3488,8 @@ msgid ""
 "<emphasis>never</emphasis> = The client will not request or check any server "
 "certificate."
 msgstr ""
+"<emphasis>never</emphasis> = クライアント�����サー�ー証明書を�求���"
+"確����ん。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1150
@@ -3360,6 +3498,9 @@ msgid ""
 "certificate is provided, the session proceeds normally. If a bad certificate "
 "is provided, it will be ignored and the session proceeds normally."
 msgstr ""
+"<emphasis>allow</emphasis> = サー�ー証明書��求�れ��。証明書��供�れ�"
+"�れ��セッション�通常通り進�られ��。�正�証明書��供�れる���れ�"
+"無視�れ�セッション�通常通り進�られ��。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1157
@@ -3368,6 +3509,9 @@ msgid ""
 "certificate is provided, the session proceeds normally. If a bad certificate "
 "is provided, the session is immediately terminated."
 msgstr ""
+"<emphasis>try</emphasis> = サー�ー証明書��求�れ��。証明書��供�れ��"
+"れ��セッション�通常通り進�られ��。�正�証明書��供�れる��セッショ"
+"ン�直��終了���。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1163
@@ -3376,6 +3520,8 @@ msgid ""
 "certificate is provided, or a bad certificate is provided, the session is "
 "immediately terminated."
 msgstr ""
+"<emphasis>demand</emphasis> = サー�ー証明書��求�れ��。証明書��供�れ"
+"��れ��も����正�証明書��供�れれ��セッション�直��終了���。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1169
@@ -3398,6 +3544,9 @@ msgid ""
 "Specifies the file that contains certificates for all of the Certificate "
 "Authorities that <command>sssd</command> will recognize."
 msgstr ""
+"Specifies the file that contains certificates for all of the Certificate "
+"Authorities that <command>sssd</command> ��識�る�����証局�対�る証明"
+"書を�むファイルを指定���。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
@@ -3421,6 +3570,10 @@ msgid ""
 "be the hash of the certificate followed by '.0'.  If available, "
 "<command>cacertdir_rehash</command> can be used to create the correct names."
 msgstr ""
+"個別�ファイル� CA 証明書を�むディレクトリー�パスを指定���。一般的�"
+"ファイル�� '.0' �終�る証明書��ッシュ��る必���り��。利用�能�ら"
+"��<command>cacertdir_rehash</command> �正����を作��る���使用��"
+"��。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1212
@@ -3460,6 +3613,9 @@ msgid ""
 "list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
 "<manvolnum>5</manvolnum></citerefentry> for format."
 msgstr ""
+"利用�能�暗�機能を指定���。�れ�一般的�コロン区切り�一覧��。形��"
+"���� <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
+"<manvolnum>5</manvolnum></citerefentry> を�照������。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1253
@@ -3472,6 +3628,8 @@ msgid ""
 "Specifies that the id_provider connection must also use <systemitem class="
 "\"protocol\">tls</systemitem> to protect the channel."
 msgstr ""
+"�ャ�ルを�護�る��� <systemitem class=\"protocol\">tls</systemitem> も使"
+"用�る必���る id_provider 接続を指定���。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1266
@@ -3522,6 +3680,8 @@ msgid ""
 "If set to true, the LDAP library would perform a reverse lookup to "
 "canonicalize the host name during a SASL bind."
 msgstr ""
+"真�設定�れ��る�� LDAP ライブラリー� SASL �インド中�ホスト�を正�化"
+"�る���逆引�を実行���。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1301
@@ -3556,6 +3716,9 @@ msgid ""
 "action is performed only if SASL is used and the mechanism selected is "
 "GSSAPI."
 msgstr ""
+"Kerberos クレディンシャル (TGT) を�期化�る id_provider を指定���。���"
+"作�� SASL �使用�れ��択�れ�メカニズム� GSSAPI ��る場���実行�れ"
+"��。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1334
@@ -3649,6 +3812,8 @@ msgid ""
 "Select the policy to evaluate the password expiration on the client side. "
 "The following values are allowed:"
 msgstr ""
+"クライアント�����パスワード期�切れを評価�る����リシーを�択��"
+"�。以下�値�許容�れ��:"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1411
@@ -3656,6 +3821,8 @@ msgid ""
 "<emphasis>none</emphasis> - No evaluation on the client side. This option "
 "cannot disable server-side password policies."
 msgstr ""
+"<emphasis>none</emphasis> - クライアント�����評価���ん。��オプショ"
+"ン�サー�ー��パスワード�リシーを無効�����ん。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1416
@@ -3675,6 +3842,9 @@ msgid ""
 "to determine if the password has expired. Use chpass_provider=krb5 to update "
 "these attributes when the password is changed."
 msgstr ""
+"<emphasis>mit_kerberos</emphasis> - パスワード�期�切れ���る�を決定�る"
+"��� MIT Kerberos �より使用�れる属性を使用���。パスワード�変更�れる"
+"����れら�属性を更新�る��� chpass_provider=krb5 を使用���。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1434
@@ -3684,7 +3854,7 @@ msgstr "ldap_referrals (論�値)"
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1437
 msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
+msgstr "自動�照追跡�有効化�れる�を指定���。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1441
@@ -3692,6 +3862,8 @@ msgid ""
 "Please note that sssd only supports referral chasing when it is compiled "
 "with OpenLDAP version 2.4.13 or higher."
 msgstr ""
+"OpenLDAP �ージョン 2.4.13 �よ��れ以���も�コンパイル�れ��る��� "
+"sssd ����照追跡をサ�ート�る���注�������。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1452
@@ -3742,6 +3914,11 @@ msgid ""
 "it will result in all users being denied access. Use access_provider = allow "
 "to change this default behavior."
 msgstr ""
+"access_provider = ldap を使用���る�ら����オプション�必須��。��ホ"
+"スト����アクセス�許��れるユーザー�対��満��れる必���る LDAP 検"
+"索フィルター基準を指定���。 access_provider = ldap ����オプション�設"
+"定�れ����������ユーザー�アクセスを拒��れる�果��り��。��"
+"�期値�よる動作を変更�る�� access_provider = allow を使用���。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
@@ -3766,6 +3943,8 @@ msgid ""
 "This example means that access to this host is restricted to members of the "
 "\"allowedusers\" group in ldap."
 msgstr ""
+"��例����ホスト��アクセス� LDAP ��る \"allowedusers\" グループ�メ"
+"ン�ー�制��れる��を�味���。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1504
@@ -3792,6 +3971,8 @@ msgid ""
 "With this option a client side evaluation of access control attributes can "
 "be enabled."
 msgstr ""
+"��オプションを使用�る��アクセス制御属性�クライアント�評価�有効��り"
+"��。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1525
@@ -3800,6 +3981,9 @@ msgid ""
 "i.e. the LDAP server should deny the bind request with a suitable error code "
 "even if the password is correct."
 msgstr ""
+"必�サー�ー��アクセス制御を使用�る���推奨�れる���注������"
+"�。��り�パスワード�正��������切�エラーコード��インド�求を拒"
+"����。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1532
@@ -3812,6 +3996,8 @@ msgid ""
 "<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
 "determine if the account is expired."
 msgstr ""
+"<emphasis>shadow</emphasis>: アカウント�失効���る�を決�る��� "
+"ldap_user_shadow_expire �値を使用���。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1540
@@ -3892,7 +4078,7 @@ msgstr "�期値: filter"
 msgid ""
 "Please note that it is a configuration error if a value is used more than "
 "once."
-msgstr ""
+msgstr "値�複数使用�れ��る�設定エラー��る���注�������。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1601
@@ -3905,6 +4091,8 @@ msgid ""
 "Specifies how alias dereferencing is done when performing a search. The "
 "following options are allowed:"
 msgstr ""
+"検索を実行�る�����よ���照解決を実行�る�を指定���。以下�オプ"
+"ション�許容�れ��:"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1609
@@ -3917,6 +4105,8 @@ msgid ""
 "<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
 "the base object, but not in locating the base object of the search."
 msgstr ""
+"<emphasis>searching</emphasis>: エイリアス�ベースオブジェクト�下���照解"
+"決�れ����検索�ベースオブジェクト��置を探�����れ��ん。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1618
@@ -3924,6 +4114,8 @@ msgid ""
 "<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
 "the base object of the search."
 msgstr ""
+"<emphasis>finding</emphasis>: エイリアス�検索�ベースオブジェクト��置を探"
+"������照解決�れ��。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1623
@@ -3931,6 +4123,8 @@ msgid ""
 "<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
 "in locating the base object of the search."
 msgstr ""
+"<emphasis>always</emphasis>: エイリアス�検索�ベースオブジェクトを検索�る�"
+"�も�置を検索�る��も�照解決�れ��。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1628
@@ -3950,6 +4144,11 @@ msgid ""
 "manvolnum> </citerefentry> manual page for full details.  <placeholder type="
 "\"variablelist\" id=\"0\"/>"
 msgstr ""
+"SSSD ドメイン��用�る����全体設定オプションを LDAP ドメイン��用��"
+"�。完全�詳細� <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
+"<manvolnum>5</manvolnum> </citerefentry> マニュアルページ� <quote>ドメインセ"
+"クション</quote> を�照������。  <placeholder type=\"variablelist\" id="
+"\"0\"/>"
 
 #. type: Content of: <reference><refentry><refsect1><title>
 #: sssd-ldap.5.xml:1639
@@ -4168,22 +4367,15 @@ msgstr "<placeholder type=\"variablelist\" id=\"0\"/>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ldap.5.xml:1815
-#, fuzzy
-#| msgid ""
-#| "The skeleton directory, which contains files and directories to be copied "
-#| "in the user's home directory, when the home directory is created by "
-#| "<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-#| "manvolnum> </citerefentry>"
 msgid ""
 "This manual page only describes attribute name mapping.  For detailed "
 "explanation of sudo related attribute semantics, see <citerefentry> "
 "<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
 "citerefentry>"
 msgstr ""
-"ホームディレクトリー� <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> �より作��れる�"
-"��ユーザー�ホームディレクトリー�コピー�れるファイル�よ�ディレクトリー"
-"を�む�スケルトンディレクトリー��。"
+"��マニュアルページ�属性�マッピング��を説明���。 sudo �関連�る属性"
+"セマンティック�詳細�説明� <citerefentry> <refentrytitle>sudoers.ldap</"
+"refentrytitle><manvolnum>5</manvolnum> </citerefentry> を�照������"
 
 #. type: Content of: <reference><refentry><refsect1><title>
 #: sssd-ldap.5.xml:1825
@@ -4564,6 +4756,9 @@ msgid ""
 "modules password and will never prompt the user - if no password is "
 "available or the password is not appropriate, the user will be denied access."
 msgstr ""
+"引数 use_first_pass �強制的�モジュール���スタック�れ�モジュール�パス"
+"ワードを使用���ユーザー�入力����ん。パスワード�何も利用�能���"
+"�����パスワード��切���れ��ユーザー�アクセスを拒��れ��。"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: pam_sss.8.xml:84
@@ -4576,6 +4771,8 @@ msgid ""
 "When password changing enforce the module to set the new password to the one "
 "provided by a previously stacked password module."
 msgstr ""
+"パスワードを変更�る���モジュール�強制的�新��パスワードを���スタッ"
+"ク�れ�パスワードモジュール�設定���。"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: pam_sss.8.xml:94
@@ -4588,6 +4785,8 @@ msgid ""
 "If specified the user is asked another N times for a password if "
 "authentication fails. Default is 0."
 msgstr ""
+"指定�れ��る���証�失敗��場��パスワードを�� N 回ユーザー�����"
+"���。�期値� 0 ��。"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: pam_sss.8.xml:99
@@ -4738,6 +4937,11 @@ msgid ""
 "<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
 "citerefentry> manual page."
 msgstr ""
+"��マニュアル� <citerefentry> <refentrytitle>sssd</refentrytitle> "
+"<manvolnum>8</manvolnum> </citerefentry> �対��簡��アクセス制御�設定を説"
+"明�����。詳細� <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
+"<manvolnum>5</manvolnum> </citerefentry> マニュアルページ� <quote>ファイル形"
+"�</quote> セクションを�照������。"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-simple.5.xml:38
@@ -4745,6 +4949,8 @@ msgid ""
 "The simple access provider grants or denies access based on an access or "
 "deny list of user or group names. The following rules apply:"
 msgstr ""
+"シンプルアクセスプロ�イダー��ユーザー����グループ��アクセス���拒"
+"��一覧�基���アクセスを許����拒����。以下�例を�用���:"
 
 #. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
 #: sssd-simple.5.xml:43
@@ -4757,6 +4963,9 @@ msgid ""
 "If any list is provided, the order of evaluation is allow,deny. This means "
 "that any matching deny rule will supersede any matched allow rule."
 msgstr ""
+"何ら��一覧��供�れ��る��許�（allow）�拒�（deny）�順�評価�れ�"
+"�。拒�ルール�一致�る����も���許�ルール�一致�る����も�を更"
+"新�る��を�味���。"
 
 #. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
 #: sssd-simple.5.xml:54
@@ -4764,6 +4973,8 @@ msgid ""
 "If either or both \"allow\" lists are provided, all users are denied unless "
 "they appear in the list."
 msgstr ""
+"\"allow\" 一覧��供�れ��る������ユーザー���一覧�表れ��れ�拒"
+"��れ��。"
 
 #. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
 #: sssd-simple.5.xml:60
@@ -4771,6 +4982,8 @@ msgid ""
 "If only \"deny\" lists are provided, all users are granted access unless "
 "they appear in the list."
 msgstr ""
+"\"deny\" 一覧����供�れ��る��ユーザー���一覧�表れ���り����"
+"�ユーザー�アクセスを許��れ��。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-simple.5.xml:78
@@ -4891,6 +5104,11 @@ msgid ""
 "FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
 "refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
 msgstr ""
+"��マニュアルページ� <citerefentry> <refentrytitle>sssd</refentrytitle> "
+"<manvolnum>8</manvolnum> </citerefentry> �対�る IPA プロ�イダー�設定を説"
+"明�����。詳細�構文��考資料� <citerefentry> <refentrytitle>sssd."
+"conf</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> マニュアルペー"
+"ジ� <quote>ファイル形�</quote> を�照������。"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ipa.5.xml:36
@@ -4900,6 +5118,10 @@ msgid ""
 "requires that the machine be joined to the IPA domain; configuration is "
 "almost entirely self-discovered and obtained directly from the server."
 msgstr ""
+"IPA プロ�イダー� IPA サー�ー�接続�る���使用�れる�ックエンド��。"
+"（IPA サー�ー�関�る詳細� freeipa.org �ウェブサイトを�照������。）"
+"��プロ�イダー��マシン� IPA ドメイン��加�����設定����全体的�"
+"自己検索�れ�サー�ー�ら直接�得�れ��る必���り��。"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ipa.5.xml:43
@@ -5070,6 +5292,7 @@ msgid ""
 "Verify with the help of krb5_keytab that the TGT obtained has not been "
 "spoofed."
 msgstr ""
+"�得�れ� TGT �改�ん�れ�����を krb5_keytab �支��確����。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:209
@@ -5105,6 +5328,8 @@ msgid ""
 "connecting to IPA LDAP and also for AS requests. This feature is available "
 "with MIT Kerberos >= 1.7"
 msgstr ""
+"IPA LDAP � AS �求�対��接続�る���ホスト�ユーザープリンシパルを正�化"
+"�る�を指定���。��機能� MIT Kerberos >= 1.7 �利用�能��。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:247
@@ -5475,6 +5700,9 @@ msgid ""
 "com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
 "This examples shows only the ipa provider-specific options."
 msgstr ""
+"以下�例��SSSD �正��設定�れ�example.com � <replaceable>[sssd]</"
+"replaceable> セクション��るドメイン� 1 ���る��を仮定�����。��"
+"例� IPA プロ�イダー固有�オプション��を示�����。"
 
 #. type: Content of: <reference><refentry><refsect1><para><programlisting>
 #: sssd-ipa.5.xml:553
@@ -5677,6 +5905,9 @@ msgid ""
 "close and reopen them. This is meant to facilitate log rolling with programs "
 "like logrotate."
 msgstr ""
+"SSSD ��在�デ�ッグファイルディスクリプター�書�込む��を止����れらを"
+"閉���ら開����よ�指示���。�れ� logrotate �よ��プログラムを用�"
+"�ログローテーションを促進�る��を�味���。"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sssd.8.xml:170
@@ -5689,6 +5920,8 @@ msgid ""
 "Tells the SSSD to simulate offline operation for one minute. This is mostly "
 "useful for testing purposes."
 msgstr ""
+"SSSD � 1 分間オフライン�作をシミュレーション�るよ�指示���。テスト目的"
+"������有用��。"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sssd.8.xml:179
@@ -5701,6 +5934,7 @@ msgid ""
 "Tells the SSSD to go online immediately. This is mostly useful for testing "
 "purposes."
 msgstr ""
+"SSSD �直��オンライン��るよ�指示���。テスト目的������有用��。"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd.8.xml:193
@@ -5771,6 +6005,13 @@ msgid ""
 "<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
 "citerefentry> for more details on these parameters."
 msgstr ""
+"平文�パスワード��標準入力�ら読�込�れ������対話的�入力�れ��。"
+"解読�����れ�パスワード�指定�れ� SSSD ドメイン� "
+"<quote>ldap_default_authtok</quote> パラメータ�置�れ��。�� "
+"<quote>ldap_default_authtok_type</quote> パラメーター� "
+"<quote>obfuscated_password</quote> �設定�れ��。�れら�パラメーター�詳細"
+"� <citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> を�照������。"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_obfuscate.8.xml:49
@@ -6109,6 +6350,9 @@ msgid ""
 "<command>sssd</command> will construct a UPN using the format "
 "<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
 msgstr ""
+"UPN �識別�ックエンド <command>sssd</command> ����利用����場���形"
+"� <replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable> "
+"を使用�� UPN を構築���。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:106
@@ -6247,6 +6491,8 @@ msgid ""
 "Timeout in seconds after an online authentication or change password request "
 "is aborted. If possible the authentication request is continued offline."
 msgstr ""
+"オンライン�証���パスワード変更�求�中止�れ�後�秒���タイムアウト�"
+"�。�能�ら���証�求�オフライン�継続�れ��。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-krb5.5.xml:241
@@ -6324,7 +6570,7 @@ msgstr "<emphasis>d</emphasis> 日。"
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
 msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
+msgstr "デリミター <emphasis>s</emphasis> ����仮定�れ��る場���。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:299
@@ -6333,6 +6579,8 @@ msgid ""
 "renewable lifetime to one and a half hours please use '90m' instead of "
 "'1h30m'."
 msgstr ""
+"���混在�������注�������。更新�能�生存期間を1時間��設定�"
+"��れ�� '1h30m' �代�り� '90m' を使用������。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:305
@@ -6357,6 +6605,8 @@ msgid ""
 "Please note that it is not possible to mix units.  If you want to set the "
 "lifetime to one and a half hours please use '90m' instead of '1h30m'."
 msgstr ""
+"���混在�������注�������。更新�能�生存期間を1時間��設定�"
+"��れ�� '1h30m' �代�り� '90m' を使用������。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:340
@@ -6377,6 +6627,8 @@ msgid ""
 "The time in seconds between two checks if the TGT should be renewed. TGTs "
 "are renewed if about half of their lifetime is exceeded."
 msgstr ""
+"TGT を更新����を確��る秒���間隔。生存期間��分�超���る�� TGT "
+"�更新�れ��。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:355
@@ -6396,6 +6648,8 @@ msgid ""
 "Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
 "authentication. The following options are supported:"
 msgstr ""
+"Kerberos �事��証���� flexible authentication secure tunneling (FAST) "
+"を有効化���。以下�オプション�サ�ート�れ��:"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-krb5.5.xml:373
@@ -6441,6 +6695,9 @@ msgid ""
 "and above. If sssd used with an older version using this option is a "
 "configuration error."
 msgstr ""
+"sssd � MIT Kerberos �ージョン 1.8 �よ��れ以上��� fast をサ�ート�る"
+"���注�������。 sssd ����ージョン�使用���る����オプショ"
+"ン�設定エラー��り��。"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-krb5.5.xml:400
@@ -6458,6 +6715,8 @@ msgid ""
 "Specifies if the host and user principal should be canonicalized. This "
 "feature is available with MIT Kerberos >= 1.7"
 msgstr ""
+"ホスト�よ�ユーザー�プリンシパル�正�化�れる����を指定���。��機"
+"能� MIT Kerberos >= 1.7 ��利用�能��。"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-krb5.5.xml:65
@@ -6468,6 +6727,11 @@ msgid ""
 "SECTIONS</quote> for details on the configuration of a SSSD domain.  "
 "<placeholder type=\"variablelist\" id=\"0\"/>"
 msgstr ""
+"�証モジュール krb5 � SSSD ドメイン����使用�れ��る��以下�オプショ"
+"ン�使用�れる必���り��。 SSSD ドメイン�設定���る詳細� "
+"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> マニュアルページ� <quote>ドメインセクション</"
+"quote> を�照������。  <placeholder type=\"variablelist\" id=\"0\"/>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-krb5.5.xml:434
@@ -6763,6 +7027,9 @@ msgid ""
 "identified by its name <replaceable>GROUP</replaceable>. The information "
 "includes the group ID number, members of the group and the parent group."
 msgstr ""
+"<command>sss_groupshow</command> ����� <replaceable>GROUP</replaceable> "
+"�より識別�れるグループ�関�る情報を表示���。情報�グループ ID 番��グ"
+"ループ�メン�ー�よ�親グループを����。"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_groupshow.8.xml:43
@@ -6826,6 +7093,9 @@ msgid ""
 "<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
 "on the command line."
 msgstr ""
+"<command>sss_usermod</command> ��コマンドライン����指定�れ�変更を�映"
+"�る���� <replaceable>LOGIN</replaceable> �より指定�れ�アカウントを変"
+"更���。"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_usermod.8.xml:60
@@ -6844,13 +7114,16 @@ msgid ""
 "replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
 "a comma separated list of group names."
 msgstr ""
+"��ユーザーを <replaceable>GROUPS</replaceable> パラメーター�より指定�れ�"
+"グループ�追加���。 <replaceable>GROUPS</replaceable> パラメーター�グルー"
+"プ��カンマ区切り一覧��。"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_usermod.8.xml:96
 msgid ""
 "Remove this user from groups specified by the <replaceable>GROUPS</"
 "replaceable> parameter."
-msgstr ""
+msgstr "<replaceable>GROUPS</replaceable> "
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_usermod.8.xml:103
@@ -6902,27 +7175,21 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sss_cache.8.xml:10 sss_cache.8.xml:15
-#, fuzzy
-#| msgid "sss_obfuscate"
 msgid "sss_cache"
-msgstr "sss_obfuscate"
+msgstr "sss_cache"
 
 #. type: Content of: <reference><refentry><refnamediv><refpurpose>
 #: sss_cache.8.xml:16
 msgid "perform cache cleanup"
-msgstr ""
+msgstr "キャッシュクリーンアップを実行�る"
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_cache.8.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg>"
 msgid ""
 "<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
 "replaceable> </arg>"
 msgstr ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
+"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
 "replaceable> </arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
@@ -6932,28 +7199,26 @@ msgid ""
 "records are forced to be reloaded from server as soon as related SSSD "
 "backend is online."
 msgstr ""
+"<command>sss_cache</command> � SSSD キャッシュ��るレコードを無効����。"
+"無効化�れ�レコード��関連�る SSSD �ックエンド�オンライン��る���"
+"��サー�ー�ら強制的��読�込��れ��。"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:42
-#, fuzzy
-#| msgid ""
-#| "<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
 msgid ""
 "<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
 msgstr ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
+"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:47
 msgid "Invalidate specific user."
-msgstr ""
+msgstr "特定�ユーザーを無効����。"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:53
-#, fuzzy
-#| msgid "<option>-h</option>,<option>--help</option>"
 msgid "<option>-U</option>,<option>--users</option>"
-msgstr "<option>-h</option>,<option>--help</option>"
+msgstr "<option>-U</option>,<option>--users</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:57
@@ -6961,30 +7226,25 @@ msgid ""
 "Invalidate all user records. This option overrides invalidation of specific "
 "user if it was also set."
 msgstr ""
+"����ユーザーレコードを無効����。��オプションも設定�れ��る���"
+"れ�特定�ユーザー�無効化を上書����。"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:64
-#, fuzzy
-#| msgid ""
-#| "<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-#| "replaceable>"
 msgid ""
 "<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
 msgstr ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
+"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:69
 msgid "Invalidate specific group."
-msgstr ""
+msgstr "特定�グループを無効����。"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:75
-#, fuzzy
-#| msgid "<option>-r</option>,<option>--remove</option>"
 msgid "<option>-G</option>,<option>--groups</option>"
-msgstr "<option>-r</option>,<option>--remove</option>"
+msgstr "<option>-G</option>,<option>--groups</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:79
@@ -6992,31 +7252,27 @@ msgid ""
 "Invalidate all group records. This option overrides invalidation of specific "
 "group if it was also set."
 msgstr ""
+"����グループレコードを無効����。��オプションも設定�れ��る���"
+"れ�特定�グループ�無効化を上書����。"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:86
-#, fuzzy
-#| msgid ""
-#| "<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-#| "replaceable>"
 msgid ""
 "<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
 "replaceable>"
 msgstr ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
+"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
 "replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:91
 msgid "Invalidate specific netgroup."
-msgstr ""
+msgstr "特定��ットワークグループを無効����。"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:97
-#, fuzzy
-#| msgid "<option>-h</option>,<option>--help</option>"
 msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr "<option>-h</option>,<option>--help</option>"
+msgstr "<option>-N</option>,<option>--netgroups</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:101
@@ -7024,52 +7280,43 @@ msgid ""
 "Invalidate all netgroup records. This option overrides invalidation of "
 "specific netgroup if it was also set."
 msgstr ""
+"�����ットワークグループレコードを無効����。��オプション�設定�れ"
+"��る���れ�特定��ットワークグループ�無効化を上書����。"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:108
-#, fuzzy
-#| msgid ""
-#| "<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-#| "replaceable>"
 msgid ""
 "<option>-d</option>,<option>--domain</option> <replaceable>domain</"
 "replaceable>"
 msgstr ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
+"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
 "replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:113
 msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
+msgstr "無効化プロセスを特定�ドメイン���制����。"
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-#, fuzzy
-#| msgid "sss_userdel"
 msgid "sss_debuglevel"
-msgstr "sss_userdel"
+msgstr "sss_debuglevel"
 
 #. type: Content of: <reference><refentry><refnamediv><refpurpose>
 #: sss_debuglevel.8.xml:16
 msgid "change debug level while SSSD is running"
-msgstr ""
+msgstr "SSSD �実行中�デ�ッグレベルを変更�る"
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_debuglevel.8.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-#| "arg>"
 msgid ""
 "<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
 "replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
 "replaceable></arg>"
 msgstr ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
+"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
+"replaceable></arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_debuglevel.8.xml:32
@@ -7078,42 +7325,40 @@ msgid ""
 "providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
 "running."
 msgstr ""
+"<command>sss_debuglevel</command> � SSSD �実行中� SSSD モニター�プロ�イ"
+"ダー�デ�ッグレベルを <replaceable>NEW_DEBUG_LEVEL</replaceable> �変更��"
+"�。"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_debuglevel.8.xml:59
 msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
+msgstr "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
 msgid "sss_ssh_authorizedkeys"
-msgstr ""
+msgstr "sss_ssh_authorizedkeys"
 
 #. type: Content of: <reference><refentry><refmeta><manvolnum>
 #: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
 msgid "1"
-msgstr ""
+msgstr "1"
 
 #. type: Content of: <reference><refentry><refnamediv><refpurpose>
 #: sss_ssh_authorizedkeys.1.xml:16
 msgid "get OpenSSH authorized keys"
-msgstr ""
+msgstr "OpenSSH ��キーを�得�る"
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_ssh_authorizedkeys.1.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-#| "arg>"
 msgid ""
 "<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
 "<replaceable>options</replaceable> </arg> <arg "
 "choice='plain'><replaceable>USER</replaceable></arg>"
 msgstr ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
+"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
+"<replaceable>options</replaceable> </arg> <arg "
+"choice='plain'><replaceable>USER</replaceable></arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:32
@@ -7124,16 +7369,14 @@ msgid ""
 "<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
 "citerefentry> for more information)."
 msgstr ""
+"<command>sss_ssh_authorizedkeys</command> �ユーザー <replaceable>USER</"
+"replaceable> � SSH 公開�を�得��� OpenSSH authorized_keys 形��出力��"
+"� (詳細� <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
+"manvolnum></citerefentry> � <quote>AUTHORIZED_KEYS FILE FORMAT</quote> セク"
+"ションを�照������)。"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:41
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>"
 msgid ""
 "<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
 "citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
@@ -7142,24 +7385,21 @@ msgid ""
 "quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
 "<manvolnum>5</manvolnum></citerefentry> options."
 msgstr ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
+"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
+"citerefentry> �� <quote>AuthorizedKeysCommand</quote> ��� "
+"<quote>PubkeyAgent</quote> <citerefentry> <refentrytitle>sshd_config</"
+"refentrytitle> <manvolnum>5</manvolnum></citerefentry> オプション�サ�ート付"
+"��コンパイル�れ��る��公開�ユーザー�証���� "
+"<command>sss_ssh_authorizedkeys</command> を使用�る���設定����。"
 
 #. type: Content of: <reference><refentry><refsect1><para><programlisting>
 #: sss_ssh_authorizedkeys.1.xml:58
 #, no-wrap
 msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
+msgstr "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:51
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
 msgid ""
 "If <quote>AuthorizedKeysCommand</quote> is supported, "
 "<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
@@ -7167,23 +7407,21 @@ msgid ""
 "in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
 "manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
 msgstr ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
+"<quote>AuthorizedKeysCommand</quote> �サ�ート�れ��る�� "
+"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
+"citerefentry> � <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
+"<manvolnum>5</manvolnum></citerefentry> �以下�ディレクティブを置����よ"
+"り��れを使用�る���設定����: <placeholder type=\"programlisting\" "
+"id=\"0\"/>"
 
 #. type: Content of: <reference><refentry><refsect1><para><programlisting>
 #: sss_ssh_authorizedkeys.1.xml:69
 #, no-wrap
 msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
+msgstr "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:62
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
 msgid ""
 "If <quote>PubkeyAgent</quote> is supported, "
 "<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
@@ -7192,25 +7430,23 @@ msgid ""
 "manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
 "\" id=\"0\"/>"
 msgstr ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
+"<quote>PubkeyAgent</quote> �サ�ート�れ��る�� "
+"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
+"citerefentry> �  <citerefentry> <refentrytitle>sshd</refentrytitle> "
+"<manvolnum>8</manvolnum></citerefentry> 設定�以下�ディレクティブを置���"
+"�より��れを使用�る���設定����: <placeholder type=\"programlisting"
+"\" id=\"0\"/>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_ssh_authorizedkeys.1.xml:87
 msgid ""
 "Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
 msgstr ""
+"SSSD ドメイン <replaceable>DOMAIN</replaceable> ��るユーザー�公開�を検索"
+"���。"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:98
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>"
 msgid ""
 "<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
 "citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
@@ -7218,37 +7454,34 @@ msgid ""
 "<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
 "manvolnum> </citerefentry>."
 msgstr ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
+"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
 "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
+"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
+"manvolnum> </citerefentry>."
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
 msgid "sss_ssh_knownhostsproxy"
-msgstr ""
+msgstr "sss_ssh_knownhostsproxy"
 
 #. type: Content of: <reference><refentry><refnamediv><refpurpose>
 #: sss_ssh_knownhostsproxy.1.xml:16
 msgid "get OpenSSH host keys"
-msgstr ""
+msgstr "OpenSSH ホストキーを�得���"
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_ssh_knownhostsproxy.1.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-#| "arg>"
 msgid ""
 "<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
 "<replaceable>options</replaceable> </arg> <arg "
 "choice='plain'><replaceable>HOST</replaceable></arg> <arg "
 "choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
 msgstr ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
+"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
+"<replaceable>options</replaceable> </arg> <arg "
+"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
+"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_knownhostsproxy.1.xml:33
@@ -7260,6 +7493,12 @@ msgid ""
 "manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
 "pubconf/known_hosts</filename> and estabilishes connection to the host."
 msgstr ""
+"<command>sss_ssh_knownhostsproxy</command> �ホスト <replaceable>HOST</"
+"replaceable> � SSH ホスト�を�得���個別� OpenSSH known_hosts ファイル "
+"(詳細�  <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
+"manvolnum></citerefentry> � <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> セク"
+"ションを�照������)  <filename>/var/lib/sss/pubconf/known_hosts</"
+"filename> ��存���ホスト��接続を確立���。"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_knownhostsproxy.1.xml:43
@@ -7267,6 +7506,8 @@ msgid ""
 "If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
 "create the connection to the host instead of opening a socket."
 msgstr ""
+"<replaceable>PROXY_COMMAND</replaceable> �指定�れ��る��ソケットを開�代"
+"�り�ホスト��接続を作��る���使用�れ��。"
 
 #. type: Content of: <reference><refentry><refsect1><para><programlisting>
 #: sss_ssh_knownhostsproxy.1.xml:55
@@ -7275,16 +7516,11 @@ msgid ""
 "ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
 "GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
 msgstr ""
+"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
+"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_knownhostsproxy.1.xml:48
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>"
 msgid ""
 "<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
 "citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
@@ -7292,22 +7528,19 @@ msgid ""
 "<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
 "citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
 msgstr ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
+"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
+"citerefentry> � <citerefentry><refentrytitle>ssh</refentrytitle> "
+"<manvolnum>1</manvolnum></citerefentry> 設定�対��以下�ディレクティブを使"
+"用�る���より�ホストキー�証� <command>sss_ssh_knownhostsproxy</"
+"command> を使用�る���設定����: <placeholder type=\"programlisting\" "
+"id=\"0\"/>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_ssh_knownhostsproxy.1.xml:69
-#, fuzzy
-#| msgid ""
-#| "<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-#| "replaceable>"
 msgid ""
 "<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
 msgstr ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
+"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_ssh_knownhostsproxy.1.xml:74
@@ -7315,22 +7548,19 @@ msgid ""
 "Use port <replaceable>PORT</replaceable> to connect to the host.  By "
 "default, port 22 is used."
 msgstr ""
+"ホスト�接続�る����ート <replaceable>PORT</replaceable> を使用���。�"
+"期値���ート 22 �使用�れ��。"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_ssh_knownhostsproxy.1.xml:86
 msgid ""
 "Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
 msgstr ""
+"SSSD ドメイン <replaceable>DOMAIN</replaceable> ����ホスト公開�を検索�"
+"��。"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_knownhostsproxy.1.xml:97
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>"
 msgid ""
 "<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
 "citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
@@ -7338,10 +7568,11 @@ msgid ""
 "<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
 "manvolnum> </citerefentry>."
 msgstr ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
+"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
 "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
+"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
+"manvolnum> </citerefentry>."
 
 #. type: Content of: <refsect1><title>
 #: include/service_discovery.xml:2
@@ -7354,6 +7585,8 @@ msgid ""
 "The service discovery feature allows back ends to automatically find the "
 "appropriate servers to connect to using a special DNS query."
 msgstr ""
+"サービス探索機能�より��ックエンド�特別� DNS �����を使用���接続�"
+"る����切�サービスを自動的�検索����。"
 
 #. type: Content of: <refsect1><refsect2><title>
 #: include/service_discovery.xml:9
@@ -7399,6 +7632,8 @@ msgid ""
 "The queries usually specify _tcp as the protocol. Exceptions are documented "
 "in respective option description."
 msgstr ""
+"������通常プロトコル��� _tcp を指定���。��他��れ�れ�オプ"
+"ション�説明�ドキュメント化�れ����。"
 
 #. type: Content of: <refsect1><refsect2><title>
 #: include/service_discovery.xml:42
@@ -7497,13 +7732,14 @@ msgid ""
 "default value as well as the lowest allowed value, 0xFFF0 is the most "
 "verbose mode. This setting overrides the settings from config file."
 msgstr ""
+"デ�ッグレベルを指示�るビットマスク�見る�������。 0x0010 ��期値�"
+"�り�利用��る最�値��。 0xFFF0 �最も冗長�モード��。��設定�設定"
+"ファイル�設定�より上書��れ��。"
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:8
-#, fuzzy
-#| msgid "Currently sssd supports the following values:"
 msgid "Currently supported debug levels:"
-msgstr "�在 sssd �以下�値をサ�ート���:"
+msgstr "�在サ�ート�れるデ�ッグレベル:"
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:11
@@ -7511,6 +7747,8 @@ msgid ""
 "<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
 "SSSD from starting up or causes it to cease running."
 msgstr ""
+"<emphasis>0x0010</emphasis>: 致命的�エラー。 SSSD �開始�る�を妨�る���"
+"�実行を中断��る�������。"
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:15
@@ -7519,6 +7757,8 @@ msgid ""
 "the SSSD, but one that indicates that at least one major feature is not "
 "going to work properly."
 msgstr ""
+"<emphasis>0x0020</emphasis>: �大�エラー。 SSSD �強制�止�����複数�機"
+"能�正��動作���エラー��。"
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:20
@@ -7526,6 +7766,8 @@ msgid ""
 "<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
 "particular request or operation has failed."
 msgstr ""
+"<emphasis>0x0040</emphasis>: 深刻�エラー。特定��求や�作�失敗����を通"
+"知�るエラー��。"
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:24
@@ -7533,35 +7775,29 @@ msgid ""
 "<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
 "percolate down to cause the operation failure of 2."
 msgstr ""
+"<emphasis>0x0080</emphasis>: 軽微�エラー。�れら� 2 ��作失敗を引�起��"
+"よ�下�����エラー��。"
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:28
-#, fuzzy
-#| msgid "<emphasis>2</emphasis>: show informational messages"
 msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr "<emphasis>2</emphasis>: 情報レベル�メッセージを表示�る"
+msgstr "<emphasis>0x0100</emphasis>: 設定値�設定��。"
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:31
-#, fuzzy
-#| msgid "<emphasis>s</emphasis> seconds"
 msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr "<emphasis>s</emphasis> 秒"
+msgstr "<emphasis>0x0200</emphasis>: 関数�データ��。"
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:34
-#, fuzzy
-#| msgid "<emphasis>3</emphasis>: show all messages and debug information"
 msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr "<emphasis>3</emphasis>: ����メッセージ�デ�ッグ情報を表示�る"
+msgstr "<emphasis>0x0400</emphasis>: �作関数�トレースメッセージ��。"
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:37
-#, fuzzy
-#| msgid "<emphasis>3</emphasis>: show all messages and debug information"
 msgid ""
 "<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr "<emphasis>3</emphasis>: ����メッセージ�デ�ッグ情報を表示�る"
+msgstr "<emphasis>0x1000</emphasis>: 内部制御関数�トレースメッセージ��。"
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:40
@@ -7569,13 +7805,12 @@ msgid ""
 "<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
 "may be interesting."
 msgstr ""
+"<emphasis>0x2000</emphasis>: 興味��る�も�れ��関数�内部変数�内容��。"
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:43
-#, fuzzy
-#| msgid "<emphasis>3</emphasis>: show all messages and debug information"
 msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr "<emphasis>3</emphasis>: ����メッセージ�デ�ッグ情報を表示�る"
+msgstr "<emphasis>0x4000</emphasis>: 極��低レベル�トレース情報��。"
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:46
@@ -7583,6 +7818,8 @@ msgid ""
 "To log required debug levels, simply add their numbers together as shown in "
 "following examples:"
 msgstr ""
+"必���るデ�ッグレベルをログ��得�る���以下�例�示�れるよ���れら"
+"�数字を��追加���:"
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:49
@@ -7590,6 +7827,8 @@ msgid ""
 "<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
 "serious failures and function data use 0x0270."
 msgstr ""
+"<emphasis>例</emphasis>: 致命的�エラー��大�エラー�深刻�エラー�よ�関数"
+"データをログ��得�る�� 0x0270 を使用���。"
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:53
@@ -7597,6 +7836,8 @@ msgid ""
 "<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
 "function data, trace messages for internal control functions use 0x1310."
 msgstr ""
+"<emphasis>例</emphasis>: 致命的�エラー�設定値�設定�関数データ�内部制御関"
+"数�トレースメッセージをログ��得�る�� 0x1310 を使用���。"
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:57
@@ -7604,6 +7845,8 @@ msgid ""
 "<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
 "1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
 msgstr ""
+"<emphasis>注</emphasis>: �れ� 1.7.0 ����導入�れ�デ�ッグレベル�新�"
+"�形���。��形�（0-10 �数字）�互�性��り����推奨�れ��ん。"
 
 #. type: Content of: outside any tag (error?)
 #: include/experimental.xml:1
@@ -7611,3 +7854,5 @@ msgid ""
 "<emphasis> This is an experimental feature, please use http://fedorahosted."
 "org/sssd to report any issues.  </emphasis>"
 msgstr ""
+"<emphasis> �れ�実験的�機能���何ら���題を報告�る�� http://"
+"fedorahosted.org/sssd を使用������。 </emphasis>"
diff --git a/src/man/po/ja_JP.po b/src/man/po/ja_JP.po
deleted file mode 100644
index 01d742714..000000000
--- a/src/man/po/ja_JP.po
+++ /dev/null
@@ -1,6747 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: LANGUAGE <LL@li.org>\n"
-"Language: ja_JP\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=1; plural=0\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/ko.po b/src/man/po/ko.po
deleted file mode 100644
index 1c24032b1..000000000
--- a/src/man/po/ko.po
+++ /dev/null
@@ -1,6747 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Korean (http://www.transifex.net/projects/p/fedora/team/ko/)\n"
-"Language: ko\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=1; plural=0\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/lt.po b/src/man/po/lt.po
deleted file mode 100644
index 07052ad1d..000000000
--- a/src/man/po/lt.po
+++ /dev/null
@@ -1,6749 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Lithuanian (http://www.transifex.net/projects/p/fedora/team/"
-"lt/)\n"
-"Language: lt\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && (n"
-"%100<10 || n%100>=20) ? 1 : 2)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/mr.po b/src/man/po/mr.po
deleted file mode 100644
index ea67b7036..000000000
--- a/src/man/po/mr.po
+++ /dev/null
@@ -1,6748 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2012-02-14 13:10+0000\n"
-"Last-Translator: sgallagh <sgallagh@redhat.com>\n"
-"Language-Team: Marathi (http://www.transifex.net/projects/p/fedora/language/"
-"mr/)\n"
-"Language: mr\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/nb.po b/src/man/po/nb.po
deleted file mode 100644
index 364d47322..000000000
--- a/src/man/po/nb.po
+++ /dev/null
@@ -1,6747 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Norwegian Bokmål <i18n-nb@lister.ping.uio.no>\n"
-"Language: nb\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/nl.po b/src/man/po/nl.po
index 64cfaec14..082016bbc 100644
--- a/src/man/po/nl.po
+++ b/src/man/po/nl.po
@@ -9,9 +9,10 @@ msgstr ""
 "Project-Id-Version: SSSD\n"
 "Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
 "POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2011-12-21 10:12+0000\n"
+"PO-Revision-Date: 2012-03-08 11:52+0000\n"
 "Last-Translator: sgallagh <sgallagh@redhat.com>\n"
-"Language-Team: Dutch (http://www.transifex.net/projects/p/fedora/team/nl/)\n"
+"Language-Team: Dutch (http://www.transifex.net/projects/p/fedora/language/"
+"nl/)\n"
 "Language: nl\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
@@ -981,24 +982,18 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><title>
 #: sssd.conf.5.xml:599
-#, fuzzy
-#| msgid "NSS configuration options"
 msgid "SUDO configuration options"
-msgstr "NSS configuratie-opties"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><para>
 #: sssd.conf.5.xml:601
-#, fuzzy
-#| msgid "These options can be used to configure any service."
 msgid "These options can be used to configure the sudo service."
-msgstr "Deze opties kunnen gebruikt worden om services te configureren."
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:608
-#, fuzzy
-#| msgid "enum_cache_timeout (integer)"
 msgid "sudo_cache_timeout (integer)"
-msgstr "enum_cache_timeout (numeriek)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:611
@@ -1026,17 +1021,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:628
-#, fuzzy
-#| msgid "Default: 120"
 msgid "Default: 180"
-msgstr "Standaard: 120"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:633
-#, fuzzy
-#| msgid "debug_timestamps (bool)"
 msgid "sudo_timed (bool)"
-msgstr "debug_timestamps (bool)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:636
@@ -1047,24 +1038,18 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><title>
 #: sssd.conf.5.xml:649
-#, fuzzy
-#| msgid "NSS configuration options"
 msgid "AUTOFS configuration options"
-msgstr "NSS configuratie-opties"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><para>
 #: sssd.conf.5.xml:651
-#, fuzzy
-#| msgid "These options can be used to configure any service."
 msgid "These options can be used to configure the autofs service."
-msgstr "Deze opties kunnen gebruikt worden om services te configureren."
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:659
-#, fuzzy
-#| msgid "entry_negative_timeout (integer)"
 msgid "autofs_negative_timeout (integer)"
-msgstr "entry_negative_timeout (numeriek)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:662
@@ -1194,23 +1179,15 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:776
-#, fuzzy
-#| msgid "enum_cache_timeout (integer)"
 msgid "entry_cache_user_timeout (integer)"
-msgstr "enum_cache_timeout (numeriek)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:779
-#, fuzzy
-#| msgid ""
-#| "How many seconds should nss_sss cache enumerations (requests for info "
-#| "about all users)"
 msgid ""
 "How many seconds should nss_sss consider user entries valid before asking "
 "the backend again"
 msgstr ""
-"Hoeveel seconden zouden nss_sss cache enumeraties (verzoeken om informatie "
-"over alle gebruikers)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
@@ -1220,63 +1197,39 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:789
-#, fuzzy
-#| msgid "enum_cache_timeout (integer)"
 msgid "entry_cache_group_timeout (integer)"
-msgstr "enum_cache_timeout (numeriek)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:792
-#, fuzzy
-#| msgid ""
-#| "How many seconds should nss_sss cache enumerations (requests for info "
-#| "about all users)"
 msgid ""
 "How many seconds should nss_sss consider group entries valid before asking "
 "the backend again"
 msgstr ""
-"Hoeveel seconden zouden nss_sss cache enumeraties (verzoeken om informatie "
-"over alle gebruikers)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:802
-#, fuzzy
-#| msgid "enum_cache_timeout (integer)"
 msgid "entry_cache_netgroup_timeout (integer)"
-msgstr "enum_cache_timeout (numeriek)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:805
-#, fuzzy
-#| msgid ""
-#| "How many seconds should nss_sss cache enumerations (requests for info "
-#| "about all users)"
 msgid ""
 "How many seconds should nss_sss consider netgroup entries valid before "
 "asking the backend again"
 msgstr ""
-"Hoeveel seconden zouden nss_sss cache enumeraties (verzoeken om informatie "
-"over alle gebruikers)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:815
-#, fuzzy
-#| msgid "enum_cache_timeout (integer)"
 msgid "entry_cache_service_timeout (integer)"
-msgstr "enum_cache_timeout (numeriek)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:818
-#, fuzzy
-#| msgid ""
-#| "How many seconds should nss_sss cache enumerations (requests for info "
-#| "about all users)"
 msgid ""
 "How many seconds should nss_sss consider service entries valid before asking "
 "the backend again"
 msgstr ""
-"Hoeveel seconden zouden nss_sss cache enumeraties (verzoeken om informatie "
-"over alle gebruikers)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:828
@@ -1523,10 +1476,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1030
-#, fuzzy
-#| msgid "re_expression (string)"
 msgid "session_provider (string)"
-msgstr "re_expression (tekst)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1033
@@ -2600,10 +2551,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:622
-#, fuzzy
-#| msgid "enum_cache_timeout (integer)"
 msgid "ldap_purge_cache_timeout (integer)"
-msgstr "enum_cache_timeout (numeriek)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:625
@@ -2897,10 +2846,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:906
-#, fuzzy
-#| msgid "Default: true"
 msgid "Default: ipService"
-msgstr "Standaard: true"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:912
@@ -2916,10 +2863,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:925
-#, fuzzy
-#| msgid "full_name_format (string)"
 msgid "ldap_service_port (string)"
-msgstr "full_name_format (tekst)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:928
@@ -2928,17 +2873,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:932
-#, fuzzy
-#| msgid "Default: true"
 msgid "Default: ipServicePort"
-msgstr "Standaard: true"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:938
-#, fuzzy
-#| msgid "re_expression (string)"
 msgid "ldap_service_proto (string)"
-msgstr "re_expression (tekst)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:941
@@ -3462,19 +3403,11 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1416
-#, fuzzy
-#| msgid ""
-#| "A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-#| "manvolnum> </citerefentry>-compatible format that describes how to "
-#| "translate a (name, domain) tuple into a fully qualified name."
 msgid ""
 "<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
 "refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
 "evaluate if the password has expired."
 msgstr ""
-"Een <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatibel formaat wat omschrijft hoe een tuple "
-"(met name, domain) vertaald wordt in een full qualified name."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1422
@@ -3742,10 +3675,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><title>
 #: sssd-ldap.5.xml:1639
-#, fuzzy
-#| msgid "OPTIONS"
 msgid "SUDO OPTIONS"
-msgstr "OPTIES"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1644
@@ -3759,17 +3690,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1650
-#, fuzzy
-#| msgid "Default: true"
 msgid "Default: sudoRole"
-msgstr "Standaard: true"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1656
-#, fuzzy
-#| msgid "full_name_format (string)"
 msgid "ldap_sudorule_name (string)"
-msgstr "full_name_format (tekst)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1659
@@ -3778,10 +3705,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1669
-#, fuzzy
-#| msgid "command (string)"
 msgid "ldap_sudorule_command (string)"
-msgstr "command (tekst)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1672
@@ -3790,10 +3715,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1676
-#, fuzzy
-#| msgid "Default: true"
 msgid "Default: sudoCommand"
-msgstr "Standaard: true"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1682
@@ -3809,10 +3732,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1690
-#, fuzzy
-#| msgid "Default: 3"
 msgid "Default: sudoHost"
-msgstr "Standaard: 3"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1696
@@ -3828,17 +3749,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1703
-#, fuzzy
-#| msgid "Default: true"
 msgid "Default: sudoUser"
-msgstr "Standaard: true"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1709
-#, fuzzy
-#| msgid "re_expression (string)"
 msgid "ldap_sudorule_option (string)"
-msgstr "re_expression (tekst)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1712
@@ -3847,10 +3764,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1716
-#, fuzzy
-#| msgid "Default: true"
 msgid "Default: sudoOption"
-msgstr "Standaard: true"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1722
@@ -3866,10 +3781,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1729
-#, fuzzy
-#| msgid "Default: true"
 msgid "Default: sudoRunAsUser"
-msgstr "Standaard: true"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1735
@@ -3885,10 +3798,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1742
-#, fuzzy
-#| msgid "Default: true"
 msgid "Default: sudoRunAsGroup"
-msgstr "Standaard: true"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1748
@@ -3904,10 +3815,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1755
-#, fuzzy
-#| msgid "Default: true"
 msgid "Default: sudoNotBefore"
-msgstr "Standaard: true"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1761
@@ -3923,10 +3832,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1769
-#, fuzzy
-#| msgid "Default: true"
 msgid "Default: sudoNotAfter"
-msgstr "Standaard: true"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1775
@@ -3940,10 +3847,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1782
-#, fuzzy
-#| msgid "Default: true"
 msgid "Default: sudoOrder"
-msgstr "Standaard: true"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1788
@@ -3959,10 +3864,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1801
-#, fuzzy
-#| msgid "enum_cache_timeout (integer)"
 msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr "enum_cache_timeout (numeriek)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1804
@@ -3986,10 +3889,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><title>
 #: sssd-ldap.5.xml:1825
-#, fuzzy
-#| msgid "OPTIONS"
 msgid "AUTOFS OPTIONS"
-msgstr "OPTIES"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ldap.5.xml:1827
@@ -4010,10 +3911,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-#, fuzzy
-#| msgid "Default: true"
 msgid "Default: automountMap"
-msgstr "Standaard: true"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1847
@@ -4027,10 +3926,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1853
-#, fuzzy
-#| msgid "Default: 3"
 msgid "Default: ou"
-msgstr "Standaard: 3"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1860
@@ -4864,10 +4761,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:307
-#, fuzzy
-#| msgid "re_expression (string)"
 msgid "ipa_automount_location (string)"
-msgstr "re_expression (tekst)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:310
@@ -5037,10 +4932,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:459
-#, fuzzy
-#| msgid "Default: 3"
 msgid "Default: seeAlso"
-msgstr "Standaard: 3"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:464
@@ -5054,10 +4947,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:471
-#, fuzzy
-#| msgid "Default: true"
 msgid "Default: ipaSELinuxUser"
-msgstr "Standaard: true"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:476
@@ -5088,10 +4979,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:495
-#, fuzzy
-#| msgid "Default: true"
 msgid "Default: userCategory"
-msgstr "Standaard: true"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:500
@@ -5105,10 +4994,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:507
-#, fuzzy
-#| msgid "Default: true"
 msgid "Default: hostCategory"
-msgstr "Standaard: true"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:512
@@ -5122,10 +5009,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:519
-#, fuzzy
-#| msgid "Default: true"
 msgid "Default: ipaUniqueID"
-msgstr "Standaard: true"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:524
@@ -5139,10 +5024,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:531
-#, fuzzy
-#| msgid "Default: true"
 msgid "Default: ipaSshPubKey"
-msgstr "Standaard: true"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ipa.5.xml:546
@@ -6390,18 +6273,10 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_cache.8.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-#| "arg>"
 msgid ""
 "<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
 "replaceable> </arg>"
 msgstr ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>opties</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROEP</replaceable></"
-"arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_cache.8.xml:31
@@ -6413,15 +6288,9 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:42
-#, fuzzy
-#| msgid ""
-#| "<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-#| "replaceable>"
 msgid ""
 "<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
 msgstr ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROEPEN</"
-"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:47
@@ -6430,14 +6299,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:53
-#, fuzzy
-#| msgid ""
-#| "<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-#| "replaceable>"
 msgid "<option>-U</option>,<option>--users</option>"
 msgstr ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROEPEN</"
-"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:57
@@ -6448,15 +6311,9 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:64
-#, fuzzy
-#| msgid ""
-#| "<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-#| "replaceable>"
 msgid ""
 "<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
 msgstr ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROEPEN</"
-"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:69
@@ -6465,14 +6322,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:75
-#, fuzzy
-#| msgid ""
-#| "<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-#| "replaceable>"
 msgid "<option>-G</option>,<option>--groups</option>"
 msgstr ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROEPEN</"
-"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:79
@@ -6483,16 +6334,10 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:86
-#, fuzzy
-#| msgid ""
-#| "<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-#| "replaceable>"
 msgid ""
 "<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
 "replaceable>"
 msgstr ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROEPEN</"
-"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:91
@@ -6501,14 +6346,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:97
-#, fuzzy
-#| msgid ""
-#| "<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-#| "replaceable>"
 msgid "<option>-N</option>,<option>--netgroups</option>"
 msgstr ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROEPEN</"
-"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:101
@@ -6519,16 +6358,10 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:108
-#, fuzzy
-#| msgid ""
-#| "<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-#| "replaceable>"
 msgid ""
 "<option>-d</option>,<option>--domain</option> <replaceable>domain</"
 "replaceable>"
 msgstr ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROEPEN</"
-"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:113
@@ -6547,19 +6380,11 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_debuglevel.8.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-#| "arg>"
 msgid ""
 "<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
 "replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
 "replaceable></arg>"
 msgstr ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>opties</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROEP</replaceable></"
-"arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_debuglevel.8.xml:32
@@ -6591,19 +6416,11 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_ssh_authorizedkeys.1.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-#| "arg>"
 msgid ""
 "<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
 "<replaceable>options</replaceable> </arg> <arg "
 "choice='plain'><replaceable>USER</replaceable></arg>"
 msgstr ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>opties</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROEP</replaceable></"
-"arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:32
@@ -6667,17 +6484,6 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:98
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
 msgid ""
 "<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
 "citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
@@ -6685,15 +6491,6 @@ msgid ""
 "<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
 "manvolnum> </citerefentry>."
 msgstr ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
@@ -6707,20 +6504,12 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_ssh_knownhostsproxy.1.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-#| "arg>"
 msgid ""
 "<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
 "<replaceable>options</replaceable> </arg> <arg "
 "choice='plain'><replaceable>HOST</replaceable></arg> <arg "
 "choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
 msgstr ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>opties</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROEP</replaceable></"
-"arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_knownhostsproxy.1.xml:33
@@ -6760,15 +6549,9 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_ssh_knownhostsproxy.1.xml:69
-#, fuzzy
-#| msgid ""
-#| "<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-#| "replaceable>"
 msgid ""
 "<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
 msgstr ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROEPEN</"
-"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_ssh_knownhostsproxy.1.xml:74
@@ -6785,17 +6568,6 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_knownhostsproxy.1.xml:97
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
 msgid ""
 "<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
 "citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
@@ -6803,15 +6575,6 @@ msgid ""
 "<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
 "manvolnum> </citerefentry>."
 msgstr ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
 
 #. type: Content of: <refsect1><title>
 #: include/service_discovery.xml:2
@@ -7061,6 +6824,3 @@ msgid ""
 "<emphasis> This is an experimental feature, please use http://fedorahosted."
 "org/sssd to report any issues.  </emphasis>"
 msgstr ""
-
-#~ msgid "Supported services: nss, pam"
-#~ msgstr "Ondersteunde diensten: nss, pam"
diff --git a/src/man/po/nn.po b/src/man/po/nn.po
deleted file mode 100644
index ccdfd055a..000000000
--- a/src/man/po/nn.po
+++ /dev/null
@@ -1,6747 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Norwegian Nynorsk <i18n-nn@lister.ping.uio.no>\n"
-"Language: nn\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/pl.po b/src/man/po/pl.po
deleted file mode 100644
index 9b9e8d983..000000000
--- a/src/man/po/pl.po
+++ /dev/null
@@ -1,6750 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2011-12-21 10:12+0000\n"
-"Last-Translator: sgallagh <sgallagh@redhat.com>\n"
-"Language-Team: Polish (http://www.transifex.net/projects/p/fedora/team/pl/)\n"
-"Language: pl\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=3; plural=(n==1 ? 0 : n%10>=2 && n%10<=4 && (n%100<10 "
-"|| n%100>=20) ? 1 : 2)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-"Katalog w systemie plików, w którym SSSD powinno przechowywać pliki pamięci "
-"podręcznej odtwarzania Kerberosa."
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/po4a.cfg b/src/man/po/po4a.cfg
index ca2771800..3e5af7421 100644
--- a/src/man/po/po4a.cfg
+++ b/src/man/po/po4a.cfg
@@ -1,4 +1,4 @@
-[po4a_langs] as bg bs bn bn_IN ca cs de el en_GB es et fa fi fr he hi hu id it ja_JP ja ko lt mr nb nl nn pl pt_BR pt ru sk sq sr sv ta tg tr uk ur vi zh_CN zh_TW
+[po4a_langs] cs es fr ja nl pt ru tg uk
 [po4a_paths] po/sssd-docs.pot $lang:po/$lang.po
 [type:docbook] sss_groupmod.8.xml $lang:$(builddir)/$lang/sss_groupmod.8.xml
 [type:docbook] sssd.conf.5.xml $lang:$(builddir)/$lang/sssd.conf.5.xml
diff --git a/src/man/po/pt.po b/src/man/po/pt.po
index aa8a30b96..21e43f15f 100644
--- a/src/man/po/pt.po
+++ b/src/man/po/pt.po
@@ -9,8 +9,8 @@ msgstr ""
 "Project-Id-Version: SSSD\n"
 "Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
 "POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2011-12-21 10:12+0000\n"
-"Last-Translator: Miguel Sousa <migueljorgesousa@sapo.pt>\n"
+"PO-Revision-Date: 2012-03-08 11:52+0000\n"
+"Last-Translator: sgallagh <sgallagh@redhat.com>\n"
 "Language-Team: Portuguese <trans-pt@lists.fedoraproject.org>\n"
 "Language: pt\n"
 "MIME-Version: 1.0\n"
@@ -949,10 +949,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><title>
 #: sssd.conf.5.xml:599
-#, fuzzy
-#| msgid "Configuration"
 msgid "SUDO configuration options"
-msgstr "Configuração"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><para>
 #: sssd.conf.5.xml:601
@@ -961,10 +959,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:608
-#, fuzzy
-#| msgid "entry_cache_timeout (integer)"
 msgid "sudo_cache_timeout (integer)"
-msgstr "entry_cache_timeout (integer)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:611
@@ -992,17 +988,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:628
-#, fuzzy
-#| msgid "Default: 10"
 msgid "Default: 180"
-msgstr "Padrão: 10"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:633
-#, fuzzy
-#| msgid "remove_homedir (bool)"
 msgid "sudo_timed (bool)"
-msgstr "remove_homedir (bool)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:636
@@ -1023,10 +1015,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:659
-#, fuzzy
-#| msgid "pam_id_timeout (integer)"
 msgid "autofs_negative_timeout (integer)"
-msgstr "pam_id_timeout (integer)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:662
@@ -1156,10 +1146,8 @@ msgstr "Padrão: 5400"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:776
-#, fuzzy
-#| msgid "entry_cache_timeout (integer)"
 msgid "entry_cache_user_timeout (integer)"
-msgstr "entry_cache_timeout (integer)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:779
@@ -1171,17 +1159,13 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
 #: sssd.conf.5.xml:822
-#, fuzzy
-#| msgid "entry_cache_timeout (integer)"
 msgid "Default: entry_cache_timeout"
-msgstr "entry_cache_timeout (integer)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:789
-#, fuzzy
-#| msgid "entry_cache_timeout (integer)"
 msgid "entry_cache_group_timeout (integer)"
-msgstr "entry_cache_timeout (integer)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:792
@@ -1192,10 +1176,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:802
-#, fuzzy
-#| msgid "entry_cache_timeout (integer)"
 msgid "entry_cache_netgroup_timeout (integer)"
-msgstr "entry_cache_timeout (integer)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:805
@@ -1206,10 +1188,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:815
-#, fuzzy
-#| msgid "entry_cache_timeout (integer)"
 msgid "entry_cache_service_timeout (integer)"
-msgstr "entry_cache_timeout (integer)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:818
@@ -1435,10 +1415,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1004
-#, fuzzy
-#| msgid "id_provider (string)"
 msgid "sudo_provider (string)"
-msgstr "id_provider (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1010
@@ -1447,17 +1425,11 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1014
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-#| "manvolnum> </citerefentry>"
 msgid ""
 "<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
 "<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
 "citerefentry> for more information on configuring LDAP."
 msgstr ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1021
@@ -1471,10 +1443,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1030
-#, fuzzy
-#| msgid "access_provider (string)"
 msgid "session_provider (string)"
-msgstr "access_provider (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1033
@@ -2549,10 +2519,8 @@ msgstr "Padrão: krbPrincipalName"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:582
-#, fuzzy
-#| msgid "ldap_user_shell (string)"
 msgid "ldap_user_ssh_public_key (string)"
-msgstr "ldap_user_shell (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:585
@@ -2592,10 +2560,8 @@ msgstr "Padrão: 300"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:622
-#, fuzzy
-#| msgid "ldap_search_timeout (integer)"
 msgid "ldap_purge_cache_timeout (integer)"
-msgstr "ldap_search_timeout (integer)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:625
@@ -2879,10 +2845,8 @@ msgstr "ldap_netgroup_modify_timestamp (string)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:900
-#, fuzzy
-#| msgid "ipa_host_object_class (string)"
 msgid "ldap_service_object_class (string)"
-msgstr "ipa_host_object_class (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:903
@@ -2891,17 +2855,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:906
-#, fuzzy
-#| msgid "Default: filter"
 msgid "Default: ipService"
-msgstr "Padrão: filter"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:912
-#, fuzzy
-#| msgid "ldap_user_fullname (string)"
 msgid "ldap_service_name (string)"
-msgstr "ldap_user_fullname (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:915
@@ -2912,10 +2872,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:925
-#, fuzzy
-#| msgid "ldap_tls_reqcert (string)"
 msgid "ldap_service_port (string)"
-msgstr "ldap_tls_reqcert (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:928
@@ -2924,17 +2882,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:932
-#, fuzzy
-#| msgid "Default: ipv4_first"
 msgid "Default: ipServicePort"
-msgstr "Default: ipv4_first"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:938
-#, fuzzy
-#| msgid "ldap_tls_reqcert (string)"
 msgid "ldap_service_proto (string)"
-msgstr "ldap_tls_reqcert (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:941
@@ -2944,17 +2898,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:945
-#, fuzzy
-#| msgid "Default: ipv4_first"
 msgid "Default: ipServiceProtocol"
-msgstr "Default: ipv4_first"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:951
-#, fuzzy
-#| msgid "ldap_user_search_base (string)"
 msgid "ldap_service_search_base (string)"
-msgstr "ldap_user_search_base (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:954
@@ -3465,17 +3415,11 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1416
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-#| "manvolnum> </citerefentry>"
 msgid ""
 "<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
 "refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
 "evaluate if the password has expired."
 msgstr ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1422
@@ -3743,17 +3687,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><title>
 #: sssd-ldap.5.xml:1639
-#, fuzzy
-#| msgid "OPTIONS"
 msgid "SUDO OPTIONS"
-msgstr "Opções"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1644
-#, fuzzy
-#| msgid "ipa_host_object_class (string)"
 msgid "ldap_sudorule_object_class (string)"
-msgstr "ipa_host_object_class (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1647
@@ -3762,17 +3702,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1650
-#, fuzzy
-#| msgid "Default: True"
 msgid "Default: sudoRole"
-msgstr "Padrão: TRUE"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1656
-#, fuzzy
-#| msgid "ldap_user_fullname (string)"
 msgid "ldap_sudorule_name (string)"
-msgstr "ldap_user_fullname (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1659
@@ -3781,10 +3717,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1669
-#, fuzzy
-#| msgid "ldap_deref (string)"
 msgid "ldap_sudorule_command (string)"
-msgstr "ldap_deref (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1672
@@ -3793,17 +3727,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1676
-#, fuzzy
-#| msgid "Default: shadowMin"
 msgid "Default: sudoCommand"
-msgstr "Padrão: shadowMin"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1682
-#, fuzzy
-#| msgid "ldap_user_authorized_host (string)"
 msgid "ldap_sudorule_host (string)"
-msgstr "ldap_user_authorized_host (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1685
@@ -3814,17 +3744,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1690
-#, fuzzy
-#| msgid "Default: host"
 msgid "Default: sudoHost"
-msgstr "Padrão: host"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1696
-#, fuzzy
-#| msgid "ldap_user_shell (string)"
 msgid "ldap_sudorule_user (string)"
-msgstr "ldap_user_shell (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1699
@@ -3835,17 +3761,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1703
-#, fuzzy
-#| msgid "Default: True"
 msgid "Default: sudoUser"
-msgstr "Padrão: TRUE"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1709
-#, fuzzy
-#| msgid "ldap_uri (string)"
 msgid "ldap_sudorule_option (string)"
-msgstr "ldap_uri (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1712
@@ -3854,17 +3776,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1716
-#, fuzzy
-#| msgid "Default: shadowMin"
 msgid "Default: sudoOption"
-msgstr "Padrão: shadowMin"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1722
-#, fuzzy
-#| msgid "ldap_user_fullname (string)"
 msgid "ldap_sudorule_runasuser (string)"
-msgstr "ldap_user_fullname (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1725
@@ -3875,17 +3793,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1729
-#, fuzzy
-#| msgid "Default: none"
 msgid "Default: sudoRunAsUser"
-msgstr "Padrão: none"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1735
-#, fuzzy
-#| msgid "ldap_user_uuid (string)"
 msgid "ldap_sudorule_runasgroup (string)"
-msgstr "ldap_user_uuid (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1738
@@ -3896,17 +3810,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1742
-#, fuzzy
-#| msgid "Default: shadowMin"
 msgid "Default: sudoRunAsGroup"
-msgstr "Padrão: shadowMin"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1748
-#, fuzzy
-#| msgid "ldap_deref (string)"
 msgid "ldap_sudorule_notbefore (string)"
-msgstr "ldap_deref (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1751
@@ -3917,17 +3827,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1755
-#, fuzzy
-#| msgid "Default: shadowExpire"
 msgid "Default: sudoNotBefore"
-msgstr "Padrão: shadowExpire"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1761
-#, fuzzy
-#| msgid "ldap_user_fullname (string)"
 msgid "ldap_sudorule_notafter (string)"
-msgstr "ldap_user_fullname (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1764
@@ -3938,17 +3844,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1769
-#, fuzzy
-#| msgid "Default: filter"
 msgid "Default: sudoNotAfter"
-msgstr "Padrão: filter"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1775
-#, fuzzy
-#| msgid "ldap_deref (string)"
 msgid "ldap_sudorule_order (string)"
-msgstr "ldap_deref (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1778
@@ -3957,17 +3859,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1782
-#, fuzzy
-#| msgid "Default: shadowExpire"
 msgid "Default: sudoOrder"
-msgstr "Padrão: shadowExpire"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1788
-#, fuzzy
-#| msgid "ldap_force_upper_case_realm (boolean)"
 msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr "ldap_force_upper_case_realm (boolean)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1791
@@ -3978,10 +3876,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1801
-#, fuzzy
-#| msgid "ldap_enumeration_refresh_timeout (integer)"
 msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr "ldap_enumeration_refresh_timeout (integer)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1804
@@ -3991,10 +3887,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ldap.5.xml:1642
-#, fuzzy
-#| msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
 msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr "<placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ldap.5.xml:1815
@@ -4007,10 +3901,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><title>
 #: sssd-ldap.5.xml:1825
-#, fuzzy
-#| msgid "OPTIONS"
 msgid "AUTOFS OPTIONS"
-msgstr "Opções"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ldap.5.xml:1827
@@ -4021,10 +3913,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1834
-#, fuzzy
-#| msgid "ipa_host_object_class (string)"
 msgid "ldap_autofs_map_object_class (string)"
-msgstr "ipa_host_object_class (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
@@ -4033,17 +3923,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-#, fuzzy
-#| msgid "Default: /tmp"
 msgid "Default: automountMap"
-msgstr "Padrão: /tmp."
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1847
-#, fuzzy
-#| msgid "ldap_user_fullname (string)"
 msgid "ldap_autofs_map_name (string)"
-msgstr "ldap_user_fullname (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1850
@@ -4052,24 +3938,18 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1853
-#, fuzzy
-#| msgid "Default: 3"
 msgid "Default: ou"
-msgstr "Padrão: 3"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1860
-#, fuzzy
-#| msgid "ipa_host_object_class (string)"
 msgid "ldap_autofs_entry_object_class (string)"
-msgstr "ipa_host_object_class (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1874
-#, fuzzy
-#| msgid "ldap_user_shell (string)"
 msgid "ldap_autofs_entry_key (string)"
-msgstr "ldap_user_shell (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
@@ -4080,17 +3960,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1888
-#, fuzzy
-#| msgid "ldap_user_uuid (string)"
 msgid "ldap_autofs_entry_value (string)"
-msgstr "ldap_user_uuid (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1895
-#, fuzzy
-#| msgid "Default: shadowInactive"
 msgid "Default: automountInformation"
-msgstr "Padrão: shadowInactive"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ldap.5.xml:1832
@@ -4192,10 +4068,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:2012
-#, fuzzy
-#| msgid "ldap_search_base (string)"
 msgid "ldap_sudo_search_base (string)"
-msgstr "ldap_search_base (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:2015
@@ -4205,10 +4079,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:2034
-#, fuzzy
-#| msgid "ldap_user_search_base (string)"
 msgid "ldap_autofs_search_base (string)"
-msgstr "ldap_user_search_base (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:2037
@@ -4786,10 +4658,8 @@ msgstr "Default: Use base DN"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:156
-#, fuzzy
-#| msgid "ipa_hbac_search_base (string)"
 msgid "ipa_host_search_base (string)"
-msgstr "ipa_hbac_search_base (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:159
@@ -4806,10 +4676,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:180
-#, fuzzy
-#| msgid "ipa_hbac_search_base (string)"
 msgid "ipa_selinux_search_base (string)"
-msgstr "ipa_hbac_search_base (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:183
@@ -4929,10 +4797,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:307
-#, fuzzy
-#| msgid "ipa_domain (string)"
 msgid "ipa_automount_location (string)"
-msgstr "ipa_domain (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:310
@@ -5052,17 +4918,13 @@ msgstr "Padrão: fqdn"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:404
-#, fuzzy
-#| msgid "ipa_host_object_class (string)"
 msgid "ipa_selinux_usermap_object_class (string)"
-msgstr "ipa_host_object_class (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:415
-#, fuzzy
-#| msgid "ldap_user_fullname (string)"
 msgid "ipa_selinux_usermap_name (string)"
-msgstr "ldap_user_fullname (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:418
@@ -5071,10 +4933,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:427
-#, fuzzy
-#| msgid "ipa_netgroup_member_host (string)"
 msgid "ipa_selinux_usermap_member_user (string)"
-msgstr "ipa_netgroup_member_host (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:430
@@ -5084,10 +4944,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:439
-#, fuzzy
-#| msgid "ipa_netgroup_member_host (string)"
 msgid "ipa_selinux_usermap_member_host (string)"
-msgstr "ipa_netgroup_member_host (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:442
@@ -5098,10 +4956,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:451
-#, fuzzy
-#| msgid "ipa_netgroup_member_host (string)"
 msgid "ipa_selinux_usermap_see_also (string)"
-msgstr "ipa_netgroup_member_host (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:454
@@ -5112,17 +4968,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:459
-#, fuzzy
-#| msgid "Default: false"
 msgid "Default: seeAlso"
-msgstr "Padrão: false"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:464
-#, fuzzy
-#| msgid "ipa_server (string)"
 msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr "ipa_server (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:467
@@ -5131,17 +4983,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:471
-#, fuzzy
-#| msgid "Default: ipaHost"
 msgid "Default: ipaSELinuxUser"
-msgstr "Padrão: ipaHost"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:476
-#, fuzzy
-#| msgid "ipa_server (string)"
 msgid "ipa_selinux_usermap_enabled (string)"
-msgstr "ipa_server (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:479
@@ -5152,17 +5000,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:483
-#, fuzzy
-#| msgid "Default: false"
 msgid "Default: ipaEnabledFlag"
-msgstr "Padrão: false"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:488
-#, fuzzy
-#| msgid "ldap_user_search_filter (string)"
 msgid "ipa_selinux_usermap_user_category (string)"
-msgstr "ldap_user_search_filter (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:491
@@ -5171,17 +5015,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:495
-#, fuzzy
-#| msgid "Default: homeDirectory"
 msgid "Default: userCategory"
-msgstr "Padrão: homeDirectory"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:500
-#, fuzzy
-#| msgid "ipa_netgroup_member_host (string)"
 msgid "ipa_selinux_usermap_host_category (string)"
-msgstr "ipa_netgroup_member_host (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:503
@@ -5190,17 +5030,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:507
-#, fuzzy
-#| msgid "Default: host"
 msgid "Default: hostCategory"
-msgstr "Padrão: host"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:512
-#, fuzzy
-#| msgid "ldap_user_uuid (string)"
 msgid "ipa_selinux_usermap_uuid (string)"
-msgstr "ldap_user_uuid (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:515
@@ -5209,17 +5045,13 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:519
-#, fuzzy
-#| msgid "Default: nsUniqueId"
 msgid "Default: ipaUniqueID"
-msgstr "Padrão: nsUniqueId"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:524
-#, fuzzy
-#| msgid "ipa_hostname (string)"
 msgid "ipa_host_ssh_public_key (string)"
-msgstr "ipa_hostname (string)"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:527
@@ -5228,10 +5060,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:531
-#, fuzzy
-#| msgid "Default: ipaHost"
 msgid "Default: ipaSshPubKey"
-msgstr "Padrão: ipaHost"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ipa.5.xml:546
@@ -6536,10 +6366,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sss_cache.8.xml:10 sss_cache.8.xml:15
-#, fuzzy
-#| msgid "sss_obfuscate"
 msgid "sss_cache"
-msgstr "sss_obfuscate"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refnamediv><refpurpose>
 #: sss_cache.8.xml:16
@@ -6548,16 +6376,10 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_cache.8.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg>"
 msgid ""
 "<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
 "replaceable> </arg>"
 msgstr ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_cache.8.xml:31
@@ -6569,14 +6391,9 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:42
-#, fuzzy
-#| msgid ""
-#| "<option>-f</option>,<option>--file</option> <replaceable>FILE</"
-#| "replaceable>"
 msgid ""
 "<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
 msgstr ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:47
@@ -6585,10 +6402,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:53
-#, fuzzy
-#| msgid "<option>-h</option>,<option>--help</option>"
 msgid "<option>-U</option>,<option>--users</option>"
-msgstr "<option>-h</option>,<option>--help</option>"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:57
@@ -6599,15 +6414,9 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:64
-#, fuzzy
-#| msgid ""
-#| "<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-#| "replaceable>"
 msgid ""
 "<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
 msgstr ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:69
@@ -6616,10 +6425,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:75
-#, fuzzy
-#| msgid "<option>-l</option>,<option>--lock</option>"
 msgid "<option>-G</option>,<option>--groups</option>"
-msgstr "<option>-l</option>,<option>--lock</option>"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:79
@@ -6630,16 +6437,10 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:86
-#, fuzzy
-#| msgid ""
-#| "<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-#| "replaceable>"
 msgid ""
 "<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
 "replaceable>"
 msgstr ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:91
@@ -6648,10 +6449,8 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:97
-#, fuzzy
-#| msgid "<option>-h</option>,<option>--help</option>"
 msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr "<option>-h</option>,<option>--help</option>"
+msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:101
@@ -6662,16 +6461,10 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:108
-#, fuzzy
-#| msgid ""
-#| "<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-#| "replaceable>"
 msgid ""
 "<option>-d</option>,<option>--domain</option> <replaceable>domain</"
 "replaceable>"
 msgstr ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:113
@@ -6690,19 +6483,11 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_debuglevel.8.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-#| "arg>"
 msgid ""
 "<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
 "replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
 "replaceable></arg>"
 msgstr ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_debuglevel.8.xml:32
@@ -6734,19 +6519,11 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_ssh_authorizedkeys.1.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-#| "arg>"
 msgid ""
 "<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
 "<replaceable>options</replaceable> </arg> <arg "
 "choice='plain'><replaceable>USER</replaceable></arg>"
 msgstr ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>Opções</"
-"replaceable></arg> <arg choice='plain'> <replaceable>grupo</replaceable></"
-"arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:32
@@ -6760,13 +6537,6 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:41
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>"
 msgid ""
 "<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
 "citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
@@ -6775,10 +6545,6 @@ msgid ""
 "quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
 "<manvolnum>5</manvolnum></citerefentry> options."
 msgstr ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
 
 #. type: Content of: <reference><refentry><refsect1><para><programlisting>
 #: sss_ssh_authorizedkeys.1.xml:58
@@ -6788,13 +6554,6 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:51
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>"
 msgid ""
 "If <quote>AuthorizedKeysCommand</quote> is supported, "
 "<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
@@ -6802,10 +6561,6 @@ msgid ""
 "in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
 "manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
 msgstr ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
 
 #. type: Content of: <reference><refentry><refsect1><para><programlisting>
 #: sss_ssh_authorizedkeys.1.xml:69
@@ -6815,13 +6570,6 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:62
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>"
 msgid ""
 "If <quote>PubkeyAgent</quote> is supported, "
 "<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
@@ -6830,10 +6578,6 @@ msgid ""
 "manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
 "\" id=\"0\"/>"
 msgstr ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_ssh_authorizedkeys.1.xml:87
@@ -6843,13 +6587,6 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:98
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>"
 msgid ""
 "<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
 "citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
@@ -6857,10 +6594,6 @@ msgid ""
 "<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
 "manvolnum> </citerefentry>."
 msgstr ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
@@ -6874,20 +6607,12 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_ssh_knownhostsproxy.1.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-#| "arg>"
 msgid ""
 "<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
 "<replaceable>options</replaceable> </arg> <arg "
 "choice='plain'><replaceable>HOST</replaceable></arg> <arg "
 "choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
 msgstr ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_knownhostsproxy.1.xml:33
@@ -6917,13 +6642,6 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_knownhostsproxy.1.xml:48
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>"
 msgid ""
 "<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
 "citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
@@ -6931,22 +6649,12 @@ msgid ""
 "<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
 "citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
 msgstr ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_ssh_knownhostsproxy.1.xml:69
-#, fuzzy
-#| msgid ""
-#| "<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-#| "replaceable>"
 msgid ""
 "<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
 msgstr ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_ssh_knownhostsproxy.1.xml:74
@@ -6963,13 +6671,6 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_knownhostsproxy.1.xml:97
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>"
 msgid ""
 "<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
 "citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
@@ -6977,10 +6678,6 @@ msgid ""
 "<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
 "manvolnum> </citerefentry>."
 msgstr ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
 
 #. type: Content of: <refsect1><title>
 #: include/service_discovery.xml:2
@@ -7165,17 +6862,13 @@ msgstr ""
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:28
-#, fuzzy
-#| msgid "<emphasis>m</emphasis> minutes"
 msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr "<emphasis>m</emphasis> minutos"
+msgstr ""
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:31
-#, fuzzy
-#| msgid "<emphasis>s</emphasis> seconds"
 msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr "<emphasis>s</emphasis> segundos"
+msgstr ""
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:34
@@ -7234,9 +6927,3 @@ msgid ""
 "<emphasis> This is an experimental feature, please use http://fedorahosted."
 "org/sssd to report any issues.  </emphasis>"
 msgstr ""
-
-#~ msgid "ldap_purge_cache_timeout"
-#~ msgstr "ldap_purge_cache_timeout"
-
-#~ msgid "Supported services: nss, pam"
-#~ msgstr "Suporte para serviços: nss, pam"
diff --git a/src/man/po/pt_BR.po b/src/man/po/pt_BR.po
deleted file mode 100644
index fc0cbc1ce..000000000
--- a/src/man/po/pt_BR.po
+++ /dev/null
@@ -1,6747 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Portuguese (Brazilian) <trans-pt_br@lists.fedoraproject.org>\n"
-"Language: pt_BR\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n > 1)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/ru.po b/src/man/po/ru.po
index b3bb926e6..dc18ff59d 100644
--- a/src/man/po/ru.po
+++ b/src/man/po/ru.po
@@ -3,13 +3,14 @@
 # This file is distributed under the same license as the sssd-docs package.
 #
 # Translators:
+# Artyom Kunyov <artkun@guitarplayer.ru>, 2012.
 msgid ""
 msgstr ""
 "Project-Id-Version: SSSD\n"
 "Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
 "POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+"PO-Revision-Date: 2012-03-08 11:52+0000\n"
+"Last-Translator: sgallagh <sgallagh@redhat.com>\n"
 "Language-Team: Russian <trans-ru@lists.fedoraproject.org>\n"
 "Language: ru\n"
 "MIME-Version: 1.0\n"
@@ -27,7 +28,7 @@ msgstr ""
 #: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
 #: sss_ssh_knownhostsproxy.1.xml:5
 msgid "SSSD Manual pages"
-msgstr ""
+msgstr "Справка по SSSD"
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
@@ -46,7 +47,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refnamediv><refpurpose>
 #: sss_groupmod.8.xml:16
 msgid "modify a group"
-msgstr ""
+msgstr "изменить группу"
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_groupmod.8.xml:21
@@ -65,7 +66,7 @@ msgstr ""
 #: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
 #: sss_ssh_knownhostsproxy.1.xml:31
 msgid "DESCRIPTION"
-msgstr ""
+msgstr "ОПИС��ИЕ"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_groupmod.8.xml:32
@@ -81,7 +82,7 @@ msgstr ""
 #: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
 #: sss_ssh_knownhostsproxy.1.xml:65
 msgid "OPTIONS"
-msgstr ""
+msgstr "ОПЦИИ"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
@@ -121,7 +122,7 @@ msgstr ""
 #: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
 #: sss_ssh_knownhostsproxy.1.xml:95
 msgid "SEE ALSO"
-msgstr ""
+msgstr "СМ. Т�КЖЕ"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_groupmod.8.xml:74
@@ -140,13 +141,13 @@ msgstr ""
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sssd.conf.5.xml:10 sssd.conf.5.xml:16
 msgid "sssd.conf"
-msgstr ""
+msgstr "sssd.CONF"
 
 #. type: Content of: <reference><refentry><refmeta><manvolnum>
 #: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
 #: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
 msgid "5"
-msgstr ""
+msgstr "5"
 
 #. type: Content of: <reference><refentry><refmeta><refmiscinfo>
 #: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
@@ -158,12 +159,12 @@ msgstr ""
 #: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
 #: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
 msgid "the configuration file for SSSD"
-msgstr ""
+msgstr "Файл конфигурации SSSD"
 
 #. type: Content of: <reference><refentry><refsect1><title>
 #: sssd.conf.5.xml:21
 msgid "FILE FORMAT"
-msgstr ""
+msgstr "ФОРМ�Т Ф�ЙЛ�"
 
 #. type: Content of: <reference><refentry><refsect1><para><programlisting>
 #: sssd.conf.5.xml:29
@@ -242,7 +243,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:81
 msgid "services"
-msgstr ""
+msgstr "�лужбы"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:84
@@ -259,7 +260,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:94 sssd.conf.5.xml:257
 msgid "reconnection_retries (integer)"
-msgstr ""
+msgstr "попыток_�оединени� (целое чи�ло)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:97 sssd.conf.5.xml:260
@@ -271,12 +272,12 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:102 sssd.conf.5.xml:265
 msgid "Default: 3"
-msgstr ""
+msgstr "По умолчанию: 3"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:107
 msgid "domains"
-msgstr ""
+msgstr "домены"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:110
@@ -338,7 +339,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:157
 msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
+msgstr "По умолчанию: <quote>%1$s@%2$s</quote>."
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:162
@@ -474,7 +475,7 @@ msgstr ""
 #: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
 #: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
 msgid "Default: false"
-msgstr ""
+msgstr "По умолчанию: false"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:270
@@ -521,7 +522,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:303
 msgid "Default: 120"
-msgstr ""
+msgstr "По умолчанию: 120"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:308
@@ -576,7 +577,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
 msgid "Default: 15"
-msgstr ""
+msgstr "По умолчанию: 15"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:354
@@ -595,7 +596,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:364
 msgid "Default: root"
-msgstr ""
+msgstr "По умолчанию: root"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:369
@@ -776,7 +777,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:487 sssd.conf.5.xml:500
 msgid "Default: 0 (No limit)"
-msgstr ""
+msgstr "По умолчанию: 0 (неограничено)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:493
@@ -813,7 +814,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
 msgid "Default: 5"
-msgstr ""
+msgstr "По умолчанию: 5"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:526
@@ -830,7 +831,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:534
 msgid "Currently sssd supports the following values:"
-msgstr ""
+msgstr "В на�то�щее врем� sssd поддерживает �ледующие значени�:"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:537
@@ -855,7 +856,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:551 sssd.8.xml:63
 msgid "Default: 1"
-msgstr ""
+msgstr "По умолчанию: 1"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:556
@@ -1027,7 +1028,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
 msgid "Default: 10"
-msgstr ""
+msgstr "По умолчанию: 10"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:721
@@ -1054,7 +1055,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
 msgid "Default: FALSE"
-msgstr ""
+msgstr "По умолчанию: FALSE"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:737
@@ -1443,7 +1444,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1063
 msgid "Supported values:"
-msgstr ""
+msgstr "Поддерживаемые значени�:"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1066
@@ -1498,7 +1499,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1106
 msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
+msgstr "По умолчанию: и�пользовать доменное им� из hostname"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1112
@@ -1615,7 +1616,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1199
 msgid "Default: <filename>/home</filename>"
-msgstr ""
+msgstr "По умолчанию: <filename>/home</filename>"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1204
@@ -1632,7 +1633,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
 msgid "Default: TRUE"
-msgstr ""
+msgstr "По умолчанию: TRUE"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1216
@@ -1662,7 +1663,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1239
 msgid "Default: 077"
-msgstr ""
+msgstr "По умолчанию: 077"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1244
@@ -1681,7 +1682,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1257
 msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
+msgstr "По умолчанию: <filename>/etc/skel</filename>"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1262
@@ -1699,7 +1700,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1272
 msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
+msgstr "По умолчанию: <filename>/var/mail</filename>"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1277
@@ -1723,7 +1724,7 @@ msgstr ""
 #: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
 #: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
 msgid "EXAMPLE"
-msgstr ""
+msgstr "ПРИМЕР"
 
 #. type: Content of: <reference><refentry><refsect1><para><programlisting>
 #: sssd.conf.5.xml:1302
@@ -1819,7 +1820,7 @@ msgstr ""
 #: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
 #: sssd-krb5.5.xml:63
 msgid "CONFIGURATION OPTIONS"
-msgstr ""
+msgstr "П�Р�МЕТРЫ КО�ФИГУР�ЦИИ"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:60
@@ -1976,7 +1977,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:180
 msgid "Default: rfc2307"
-msgstr ""
+msgstr "По умолчанию: rfc2307"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:186
@@ -2006,7 +2007,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:206
 msgid "password"
-msgstr ""
+msgstr "пароль"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:209
@@ -2043,7 +2044,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:234
 msgid "Default: posixAccount"
-msgstr ""
+msgstr "По умолчанию: posixAccount"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:240
@@ -2103,7 +2104,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:286
 msgid "Default: gecos"
-msgstr ""
+msgstr "По умолчанию: gecos"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:292
@@ -2118,7 +2119,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:299
 msgid "Default: homeDirectory"
-msgstr ""
+msgstr "По умолчанию: homeDirectory"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:305
@@ -2133,7 +2134,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:312
 msgid "Default: loginShell"
-msgstr ""
+msgstr "По умолчанию: loginShell"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:318
@@ -2165,7 +2166,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
 msgid "Default: modifyTimestamp"
-msgstr ""
+msgstr "По умолчанию: modifyTimestamp"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:344
@@ -2241,7 +2242,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:412
 msgid "Default: shadowWarning"
-msgstr ""
+msgstr "По умолчанию: shadowWarning"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:418
@@ -2260,7 +2261,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:431
 msgid "Default: shadowInactive"
-msgstr ""
+msgstr "По умолчанию: shadowInactive"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:437
@@ -2279,7 +2280,7 @@ msgstr ""
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:450
 msgid "Default: shadowExpire"
-msgstr ""
+msgstr "По умолчанию: shadowExpire"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:456
diff --git a/src/man/po/sk.po b/src/man/po/sk.po
deleted file mode 100644
index 01d5e61ef..000000000
--- a/src/man/po/sk.po
+++ /dev/null
@@ -1,6747 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Slovak (http://www.transifex.net/projects/p/fedora/team/sk/)\n"
-"Language: sk\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=3; plural=(n==1) ? 0 : (n>=2 && n<=4) ? 1 : 2\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/sq.po b/src/man/po/sq.po
deleted file mode 100644
index 6071f8460..000000000
--- a/src/man/po/sq.po
+++ /dev/null
@@ -1,6748 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Albanian (http://www.transifex.net/projects/p/fedora/team/"
-"sq/)\n"
-"Language: sq\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/sr.po b/src/man/po/sr.po
deleted file mode 100644
index be694a372..000000000
--- a/src/man/po/sr.po
+++ /dev/null
@@ -1,6748 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Serbian <trans-sr@lists.fedoraproject.org>\n"
-"Language: sr\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
-"%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/sv.po b/src/man/po/sv.po
deleted file mode 100644
index 4405798b3..000000000
--- a/src/man/po/sv.po
+++ /dev/null
@@ -1,6748 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Swedish (http://www.transifex.net/projects/p/fedora/language/"
-"sv/)\n"
-"Language: sv\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/ta.po b/src/man/po/ta.po
deleted file mode 100644
index 989dc8433..000000000
--- a/src/man/po/ta.po
+++ /dev/null
@@ -1,6747 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Tamil <tamil-users@lists.fedoraproject.org>\n"
-"Language: ta\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/tg.po b/src/man/po/tg.po
index 19b38b28c..4ee15a2d4 100644
--- a/src/man/po/tg.po
+++ b/src/man/po/tg.po
@@ -8,7 +8,7 @@ msgstr ""
 "Project-Id-Version: SSSD\n"
 "Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
 "POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2012-02-14 13:10+0000\n"
+"PO-Revision-Date: 2012-03-08 11:52+0000\n"
 "Last-Translator: sgallagh <sgallagh@redhat.com>\n"
 "Language-Team: Tajik (http://www.transifex.net/projects/p/fedora/language/"
 "tg/)\n"
diff --git a/src/man/po/tr.po b/src/man/po/tr.po
deleted file mode 100644
index b59201974..000000000
--- a/src/man/po/tr.po
+++ /dev/null
@@ -1,6748 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Turkish (http://www.transifex.net/projects/p/fedora/team/"
-"tr/)\n"
-"Language: tr\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=1; plural=0\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/uk.po b/src/man/po/uk.po
index fcbbfba41..e1f3852f9 100644
--- a/src/man/po/uk.po
+++ b/src/man/po/uk.po
@@ -4,14 +4,14 @@
 #
 # Translators:
 # sgallagh <sgallagh@redhat.com>, 2011.
-# Yuri Chornoivan <yurchor@ukr.net>, 2011.
+# Yuri Chornoivan <yurchor@ukr.net>, 2011, 2012.
 msgid ""
 msgstr ""
 "Project-Id-Version: SSSD\n"
 "Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
 "POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2011-12-21 10:12+0000\n"
-"Last-Translator: Yuri Chornoivan <yurchor@ukr.net>\n"
+"PO-Revision-Date: 2012-03-12 20:08+0000\n"
+"Last-Translator: sgallagh <sgallagh@redhat.com>\n"
 "Language-Team: Ukrainian <trans-uk@lists.fedoraproject.org>\n"
 "Language: uk\n"
 "MIME-Version: 1.0\n"
@@ -302,6 +302,7 @@ msgstr ""
 msgid ""
 "Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
 msgstr ""
+"Підтримувані �лужби: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:94 sssd.conf.5.xml:257
@@ -1079,40 +1080,29 @@ msgstr "Типове значенн�: 7"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><title>
 #: sssd.conf.5.xml:599
-#, fuzzy
-#| msgid "NSS configuration options"
 msgid "SUDO configuration options"
-msgstr "Параметри налаштуванн� NSS"
+msgstr "Параметри налаштуванн� SUDO"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><para>
 #: sssd.conf.5.xml:601
-#, fuzzy
-#| msgid "These options can be used to configure any service."
 msgid "These options can be used to configure the sudo service."
-msgstr "Цими параметрами можна �кори�тати�� дл� налаштуванн� будь-�ких �лужб."
+msgstr "Цими параметрами можна �кори�тати�� дл� налаштуванн� �лужби sudo."
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:608
-#, fuzzy
-#| msgid "enum_cache_timeout (integer)"
 msgid "sudo_cache_timeout (integer)"
-msgstr "enum_cache_timeout (ціле чи�ло)"
+msgstr "sudo_cache_timeout (ціле чи�ло)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:611
-#, fuzzy
-#| msgid ""
-#| "For any PAM request while SSSD is online, the SSSD will attempt to "
-#| "immediately update the cached identity information for the user in order "
-#| "to ensure that authentication takes place with the latest information."
 msgid ""
 "For any sudo request that comes while SSSD is online, the SSSD will attempt "
 "to update the cached rules in order to ensure that sudo has the latest "
 "ruleset."
 msgstr ""
-"Дл� кожного з запитів PAM під ча� роботи SSSD �и�тема SSSD зробить �пробу "
-"негайно оновити кешовані дані щодо профілю кори�тувача з метою переконати��, "
-"що розпізнаванн� виконуєть�� на о�нові най�віжіших даних."
+"У відповідь на кожен запит до sudo, �кий надходить прот�гом ча�у роботи "
+"SSSD, SSSD намагатиметь�� оновити кешовані правила з метою забезпеченн� "
+"викори�танн� у sudo най�віжішого набору правил."
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:617
@@ -1122,6 +1112,11 @@ msgid ""
 "the sudo service maintains an in-memory cache that would be used for "
 "performing fast replies."
 msgstr ""
+"Втім, кори�тувач може віддати декілька по�лідовних команд sudo, �проба "
+"виконанн� �ких призведе до одноча�ного над�иланн� декількох запитів до LDAP. "
+"У такому разі з метою пришвидшенн� обробки �лужба sudo кори�туватиметь�� "
+"кешем у пам’�ті, �кий викори�товуватиметь�� дл� формуванн� швидких "
+"відповідей."
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:624
@@ -1129,20 +1124,18 @@ msgid ""
 "This option controls how long (in seconds) can the sudo service cache rules "
 "for a user."
 msgstr ""
+"За допомогою цього параметра можна визначити тривалі�ть (у �екундах) "
+"зберіганн� �лужбою sudo паролів у кеші."
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:628
-#, fuzzy
-#| msgid "Default: 10"
 msgid "Default: 180"
-msgstr "Типове значенн�: 10"
+msgstr "Типове значенн�: 180"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:633
-#, fuzzy
-#| msgid "debug_timestamps (bool)"
 msgid "sudo_timed (bool)"
-msgstr "debug_timestamps (булеве значенн�)"
+msgstr "sudo_timed (булеве значенн�)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:636
@@ -1150,43 +1143,34 @@ msgid ""
 "Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
 "that implement time-dependent sudoers entries."
 msgstr ""
+"Визначає, чи �лід обробл�ти атрибути sudoNotBefore і sudoNotAfter, "
+"призначені дл� визначенн� ча�ових обмежень дл� запи�ів sudoers."
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><title>
 #: sssd.conf.5.xml:649
-#, fuzzy
-#| msgid "NSS configuration options"
 msgid "AUTOFS configuration options"
-msgstr "Параметри налаштуванн� NSS"
+msgstr "Параметри налаштуванн� AUTOFS"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><para>
 #: sssd.conf.5.xml:651
-#, fuzzy
-#| msgid "These options can be used to configure any service."
 msgid "These options can be used to configure the autofs service."
-msgstr "Цими параметрами можна �кори�тати�� дл� налаштуванн� будь-�ких �лужб."
+msgstr "Цими параметрами можна �кори�тати�� дл� налаштуванн� �лужби autofs."
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:659
-#, fuzzy
-#| msgid "entry_negative_timeout (integer)"
 msgid "autofs_negative_timeout (integer)"
-msgstr "entry_negative_timeout (ціле чи�ло)"
+msgstr "autofs_negative_timeout (ціле чи�ло)"
 
 #. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:662
-#, fuzzy
-#| msgid ""
-#| "Specifies for how many seconds nss_sss should cache negative cache hits "
-#| "(that is, queries for invalid database entries, like nonexistent ones)  "
-#| "before asking the back end again."
 msgid ""
 "Specifies for how many seconds should the autofs responder negative cache "
 "hits (that is, queries for invalid map entries, like nonexistent ones) "
 "before asking the back end again."
 msgstr ""
-"Визначає кількі�ть �екунд, прот�гом �ких nss_sss має кешувати негативні "
-"результати пошуку у кеші (тобто запити щодо некоректних запи�ів у базі "
-"даних, зокрема неі�нуючих) перед повторним запитом до �ервера обробки."
+"Визначає кількі�ть �екунд, прот�гом �ких відповідач autofs має кешувати "
+"негативні результати пошуку у кеші (тобто запити щодо некоректних запи�ів у "
+"базі даних, зокрема неі�нуючих) перед повторним запитом до �ервера обробки."
 
 #. type: Content of: <reference><refentry><refsect1><title>
 #: sssd.conf.5.xml:679
@@ -1333,91 +1317,65 @@ msgstr "Типове значенн�: 5400"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:776
-#, fuzzy
-#| msgid "entry_cache_timeout (integer)"
 msgid "entry_cache_user_timeout (integer)"
-msgstr "entry_cache_timeout (ціле чи�ло)"
+msgstr "entry_cache_user_timeout (ціле чи�ло)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:779
-#, fuzzy
-#| msgid ""
-#| "How many seconds should nss_sss consider entries valid before asking the "
-#| "backend again"
 msgid ""
 "How many seconds should nss_sss consider user entries valid before asking "
 "the backend again"
 msgstr ""
-"Кількі�ть �екунд, прот�гом �ких nss_sss вважатиме запи�и чинними, перш ніж "
-"над�илати повторний запит до �ервера"
+"Кількі�ть �екунд, прот�гом �ких nss_sss вважатиме запи�и кори�тувачів "
+"чинними, перш ніж над�илати повторний запит до �ервера"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
 #: sssd.conf.5.xml:822
-#, fuzzy
-#| msgid "entry_cache_timeout (integer)"
 msgid "Default: entry_cache_timeout"
-msgstr "entry_cache_timeout (ціле чи�ло)"
+msgstr "Типове значенн�: entry_cache_timeout"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:789
-#, fuzzy
-#| msgid "entry_cache_timeout (integer)"
 msgid "entry_cache_group_timeout (integer)"
-msgstr "entry_cache_timeout (ціле чи�ло)"
+msgstr "entry_cache_group_timeout (ціле чи�ло)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:792
-#, fuzzy
-#| msgid ""
-#| "How many seconds should nss_sss consider entries valid before asking the "
-#| "backend again"
 msgid ""
 "How many seconds should nss_sss consider group entries valid before asking "
 "the backend again"
 msgstr ""
-"Кількі�ть �екунд, прот�гом �ких nss_sss вважатиме запи�и чинними, перш ніж "
-"над�илати повторний запит до �ервера"
+"Кількі�ть �екунд, прот�гом �ких nss_sss вважатиме запи�и груп чинними, перш "
+"ніж над�илати повторний запит до �ервера"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:802
-#, fuzzy
-#| msgid "entry_cache_timeout (integer)"
 msgid "entry_cache_netgroup_timeout (integer)"
-msgstr "entry_cache_timeout (ціле чи�ло)"
+msgstr "entry_cache_netgroup_timeout (ціле чи�ло)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:805
-#, fuzzy
-#| msgid ""
-#| "How many seconds should nss_sss consider entries valid before asking the "
-#| "backend again"
 msgid ""
 "How many seconds should nss_sss consider netgroup entries valid before "
 "asking the backend again"
 msgstr ""
-"Кількі�ть �екунд, прот�гом �ких nss_sss вважатиме запи�и чинними, перш ніж "
-"над�илати повторний запит до �ервера"
+"Кількі�ть �екунд, прот�гом �ких nss_sss вважатиме запи�и мережевих груп "
+"чинними, перш ніж над�илати повторний запит до �ервера"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:815
-#, fuzzy
-#| msgid "entry_cache_timeout (integer)"
 msgid "entry_cache_service_timeout (integer)"
-msgstr "entry_cache_timeout (ціле чи�ло)"
+msgstr "entry_cache_service_timeout (ціле чи�ло)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:818
-#, fuzzy
-#| msgid ""
-#| "How many seconds should nss_sss consider entries valid before asking the "
-#| "backend again"
 msgid ""
 "How many seconds should nss_sss consider service entries valid before asking "
 "the backend again"
 msgstr ""
-"Кількі�ть �екунд, прот�гом �ких nss_sss вважатиме запи�и чинними, перш ніж "
-"над�илати повторний запит до �ервера"
+"Кількі�ть �екунд, прот�гом �ких nss_sss вважатиме запи�и �лужб чинними, перш "
+"ніж над�илати повторний запит до �ервера"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:828
@@ -1683,113 +1641,81 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1004
-#, fuzzy
-#| msgid "id_provider (string)"
 msgid "sudo_provider (string)"
-msgstr "id_provider (р�док)"
+msgstr "sudo_provider (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1010
-#, fuzzy
-#| msgid ""
-#| "The authentication provider used for the domain.  Supported auth "
-#| "providers are:"
 msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
 msgstr ""
-"Служба розпізнаванн�, �ку викори�тано дл� цього домену. Серед підтримуваних "
-"�лужб розпізнаванн�:"
+"Служба SUDO, �ку викори�тано дл� цього домену. Серед підтримуваних �лужб "
+"SUDO:"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1014
-#, fuzzy
-#| msgid ""
-#| "<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-#| "<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-#| "manvolnum> </citerefentry> for more information on configuring LDAP."
 msgid ""
 "<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
 "<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
 "citerefentry> for more information on configuring LDAP."
 msgstr ""
-"<quote>ldap</quote> — змінити пароль, що зберігаєть�� на �ервері LDAP. "
-"Докладніші відомо�ті щодо налаштуванн� LDAP викладено у довіднику з "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>."
+"<quote>ldap</quote> дл� правил, що зберігають�� у LDAP. Докладніше про "
+"налаштовуванн� LDAP можна дізнати�� з довідки до <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry>."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1021
-#, fuzzy
-#| msgid "<quote>none</quote> disables authentication explicitly."
 msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr "<quote>none</quote> — вимкнути розпізнаванн� повні�тю."
+msgstr "<quote>none</quote> �вним чином вимикає SUDO."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1024
-#, fuzzy
-#| msgid ""
-#| "Default: <quote>id_provider</quote> is used if it is set and can handle "
-#| "authentication requests."
 msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
 msgstr ""
-"Типове значенн�: буде викори�тано <quote>id_provider</quote>, �кщо цей "
-"�по�іб в�тановлено і можлива обробка запитів щодо розпізнаванн�."
+"Типове значенн�: викори�товуєть�� значенн� <quote>id_provider</quote>, �кщо "
+"його в�тановлено."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1030
-#, fuzzy
-#| msgid "access_provider (string)"
 msgid "session_provider (string)"
-msgstr "access_provider (р�док)"
+msgstr "session_provider (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1033
-#, fuzzy
-#| msgid ""
-#| "The provider which should handle change password operations for the "
-#| "domain.  Supported change password providers are:"
 msgid ""
 "The provider which should handle loading of session settings.  Supported "
 "session providers are:"
 msgstr ""
-"Си�тема, �ка має обробл�ти дії зі зміни паролів дл� домену. Передбачено "
-"підтримку таких �и�тем зміни паролів:"
+"Служба, �ка має обробл�ти завантаженн� параметрів �еан�у. Серед "
+"підтримуваних �лужб �еан�ів:"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1038
-#, fuzzy
-#| msgid ""
-#| "<quote>ipa</quote> to change a password stored in an IPA server.  See "
-#| "<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-#| "manvolnum> </citerefentry> for more information on configuring IPA."
 msgid ""
 "<quote>ipa</quote> to load session settings from an IPA server. See "
 "<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
 "manvolnum> </citerefentry> for more information on configuring IPA."
 msgstr ""
-"<quote>ipa</quote> — змінити пароль, що зберігаєть�� на �ервері IPA. "
+"<quote>ipa</quote> дл� завантаженн� параметрів �еан�ів з �ервера IPA. "
 "Докладніші відомо�ті щодо налаштуванн� IPA викладено у довіднику з "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum></"
+"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
 "manvolnum> </citerefentry>."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1046
-#, fuzzy
-#| msgid "<quote>none</quote> disallows password changes explicitly."
 msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr "<quote>none</quote> — �вно вимкнути можливі�ть зміни парол�."
+msgstr ""
+"<quote>none</quote> �вним чином заборон�є отриманн� даних щодо параметрів "
+"�еан�у."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd.conf.5.xml:1049
-#, fuzzy
-#| msgid ""
-#| "Default: <quote>id_provider</quote> is used if it is set and can handle "
-#| "authentication requests."
 msgid ""
 "Default: <quote>id_provider</quote> is used if it is set and can handle "
 "session loading requests."
 msgstr ""
 "Типове значенн�: буде викори�тано <quote>id_provider</quote>, �кщо цей "
-"�по�іб в�тановлено і можлива обробка запитів щодо розпізнаванн�."
+"�по�іб в�тановлено і можлива обробка запитів щодо завантаженн� �еан�у."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd.conf.5.xml:1056
@@ -2997,19 +2923,13 @@ msgstr "Типове значенн�: krbPrincipalName"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:582
-#, fuzzy
-#| msgid "ldap_user_shell (string)"
 msgid "ldap_user_ssh_public_key (string)"
-msgstr "ldap_user_shell (р�док)"
+msgstr "ldap_user_ssh_public_key (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:585
-#, fuzzy
-#| msgid ""
-#| "The LDAP attribute that contains the path to the user's default shell."
 msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-"�трибут LDAP, що мі�тить шл�х до типової командної оболонки кори�тувача."
+msgstr "�трибут LDAP, �кий мі�тить відкриті ключі SSH кори�тувача."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:592
@@ -3037,16 +2957,12 @@ msgstr "ldap_enumeration_refresh_timeout (ціле чи�ло)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:611
-#, fuzzy
-#| msgid ""
-#| "The LDAP attribute that contains how many seconds SSSD has to wait before "
-#| "refreshing its cache of enumerated records."
 msgid ""
 "Specifies how many seconds SSSD has to wait before refreshing its cache of "
 "enumerated records."
 msgstr ""
-"�трибут LDAP, що мі�тить дані щодо кілько�ті �екунд, прот�гом �ких SSSD має "
-"очікувати до оновленн� �вого кешу нумерованих запи�ів."
+"Визначає кількі�ть �екунд, прот�гом �ких SSSD має очікувати до оновленн� "
+"�вого кешу нумерованих запи�ів."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
@@ -3055,10 +2971,8 @@ msgstr "Типове значенн�: 300"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:622
-#, fuzzy
-#| msgid "ldap_search_timeout (integer)"
 msgid "ldap_purge_cache_timeout (integer)"
-msgstr "ldap_search_timeout (ціле чи�ло)"
+msgstr "ldap_purge_cache_timeout (ціле чи�ло)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:625
@@ -3362,103 +3276,73 @@ msgstr "ldap_netgroup_modify_timestamp (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:900
-#, fuzzy
-#| msgid "ldap_user_object_class (string)"
 msgid "ldap_service_object_class (string)"
-msgstr "ldap_user_object_class (р�док)"
+msgstr "ldap_service_object_class (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:903
-#, fuzzy
-#| msgid "The object class of a user entry in LDAP."
 msgid "The object class of a service entry in LDAP."
-msgstr "Кла� об’єктів запи�у кори�тувача у LDAP."
+msgstr "Кла� об’єктів запи�у �лужби у LDAP."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:906
-#, fuzzy
-#| msgid "Default: authorizedService"
 msgid "Default: ipService"
-msgstr "Типове значенн�: authorizedService"
+msgstr "Типове значенн�: ipService"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:912
-#, fuzzy
-#| msgid "ldap_dns_service_name (string)"
 msgid "ldap_service_name (string)"
-msgstr "ldap_dns_service_name (р�док)"
+msgstr "ldap_service_name (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:915
-#, fuzzy
-#| msgid ""
-#| "The LDAP attribute that contains the name of the user's home directory."
 msgid ""
 "The LDAP attribute that contains the name of service attributes and their "
 "aliases."
-msgstr "�трибут LDAP, що мі�тить назву домашнього каталогу кори�тувача."
+msgstr ""
+"�трибут LDAP, що мі�тить назву атрибутів �лужби та замінників цих атрибутів."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:925
-#, fuzzy
-#| msgid "ldap_tls_cert (string)"
 msgid "ldap_service_port (string)"
-msgstr "ldap_tls_cert (р�док)"
+msgstr "ldap_service_port (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:928
-#, fuzzy
-#| msgid ""
-#| "The LDAP attribute that contains the name of the user's home directory."
 msgid "The LDAP attribute that contains the port managed by this service."
-msgstr "�трибут LDAP, що мі�тить назву домашнього каталогу кори�тувача."
+msgstr "�трибут LDAP, що мі�тить номер порту, �ким керує ц� �лужба."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:932
-#, fuzzy
-#| msgid "Default: ipv4_first"
 msgid "Default: ipServicePort"
-msgstr "Типове значенн�: ipv4_first"
+msgstr "Типове значенн�: ipServicePort"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:938
-#, fuzzy
-#| msgid "ldap_tls_cert (string)"
 msgid "ldap_service_proto (string)"
-msgstr "ldap_tls_cert (р�док)"
+msgstr "ldap_service_proto (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:941
-#, fuzzy
-#| msgid ""
-#| "The LDAP attribute that contains the path to the user's default shell."
 msgid ""
 "The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-"�трибут LDAP, що мі�тить шл�х до типової командної оболонки кори�тувача."
+msgstr "�трибут LDAP, що мі�тить протоколи, за �ким може працювати ц� �лужба."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:945
-#, fuzzy
-#| msgid "Default: ipv4_first"
 msgid "Default: ipServiceProtocol"
-msgstr "Типове значенн�: ipv4_first"
+msgstr "Типове значенн�: ipServiceProtocol"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:951
-#, fuzzy
-#| msgid "ldap_user_search_base (string)"
 msgid "ldap_service_search_base (string)"
-msgstr "ldap_user_search_base (р�док)"
+msgstr "ldap_service_search_base (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:954
-#, fuzzy
-#| msgid "An optional base DN to restrict user searches to a specific subtree."
 msgid "An optional base DN to restrict service searches to a specific subtree."
 msgstr ""
-"Додатковий о�новний DN дл� обмеженн� пошуків кори�тувачів певною гілкою "
-"ієрархії."
+"Додатковий о�новний DN дл� обмеженн� пошуків �лужб певною гілкою ієрархії."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
@@ -3617,7 +3501,7 @@ msgstr "Типове значенн�: 1000"
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1079
 msgid "ldap_disable_paging"
-msgstr ""
+msgstr "ldap_disable_paging"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1082
@@ -3626,6 +3510,9 @@ msgid ""
 "server reports that it supports the LDAP paging control in its RootDSE but "
 "it is not enabled or does not behave properly."
 msgstr ""
+"Вимикає контроль �торінок LDAP. Цим параметром �лід �кори�тати��, �кщо "
+"�ервер LDAP повідомл�є про підтримку контролю �торінок LDAP у �воєму "
+"RootDSE, але цю підтримку не увімкнено або вона не працює належним чином."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1088
@@ -3633,6 +3520,9 @@ msgid ""
 "Example: OpenLDAP servers with the paging control module installed on the "
 "server but not enabled will report it in the RootDSE but be unable to use it."
 msgstr ""
+"Приклад: �ервери OpenLDAP з модулем контролю �торінок, в�тановленим на "
+"�ервері, але не увімкненим, повідомл�ють про підтримку у RootDSE, але цією "
+"підтримкою не можна �кори�тати��."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1094
@@ -3641,6 +3531,9 @@ msgid ""
 "a time on a single connection. On busy clients, this can result in some "
 "requests being denied."
 msgstr ""
+"Приклад: 389 DS має ваду, пов’�зану з тим, що здатен підтримувати лише один "
+"проце� контролю �торінок дл� одного з’єднанн�. У разі значного навантаженн� "
+"це може призве�ти до відмови у виконанні запитів."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1103
@@ -4068,22 +3961,14 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1416
-#, fuzzy
-#| msgid ""
-#| "<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-#| "refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes "
-#| "to evaluate if the password has expired.  Note that the current version "
-#| "of sssd cannot update this attribute during a password change."
 msgid ""
 "<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
 "refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
 "evaluate if the password has expired."
 msgstr ""
-"<emphasis>shadow</emphasis> — викори�товувати атрибути у форматі "
+"<emphasis>shadow</emphasis> — викори�товувати атрибути у �тилі "
 "<citerefentry><refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> дл� визначенн� завершенн� �троку дії парол�. "
-"Зауважте, що у поточній вер�ії sssd не передбачено можливо�ті оновленн� "
-"цього атрибута під ча� зміни парол�."
+"manvolnum></citerefentry> дл� визначенн� того, чи чинним є пароль."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1422
@@ -4419,253 +4304,194 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><title>
 #: sssd-ldap.5.xml:1639
-#, fuzzy
-#| msgid "OPTIONS"
 msgid "SUDO OPTIONS"
-msgstr "П�Р�МЕТРИ"
+msgstr "П�Р�МЕТРИ SUDO"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1644
-#, fuzzy
-#| msgid "ldap_user_object_class (string)"
 msgid "ldap_sudorule_object_class (string)"
-msgstr "ldap_user_object_class (р�док)"
+msgstr "ldap_sudorule_object_class (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1647
-#, fuzzy
-#| msgid "The object class of a user entry in LDAP."
 msgid "The object class of a sudo rule entry in LDAP."
-msgstr "Кла� об’єктів запи�у кори�тувача у LDAP."
+msgstr "Кла� об’єктів запи�у правила sudo у LDAP."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1650
-#, fuzzy
-#| msgid "Default: uid"
 msgid "Default: sudoRole"
-msgstr "Типове значенн�: uid"
+msgstr "Типове значенн�: sudoRole"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1656
-#, fuzzy
-#| msgid "ldap_user_name (string)"
 msgid "ldap_sudorule_name (string)"
-msgstr "ldap_user_name (р�док)"
+msgstr "ldap_sudorule_name (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1659
-#, fuzzy
-#| msgid "The LDAP attribute that corresponds to the group name."
 msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr "�трибут LDAP, що відповідає назві групи."
+msgstr "�трибут LDAP, що відповідає назві правила sudo."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1669
-#, fuzzy
-#| msgid "ldap_schema (string)"
 msgid "ldap_sudorule_command (string)"
-msgstr "ldap_schema (р�док)"
+msgstr "ldap_sudorule_command (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1672
-#, fuzzy
-#| msgid "The LDAP attribute that corresponds to the group name."
 msgid "The LDAP attribute that corresponds to the command name."
-msgstr "�трибут LDAP, що відповідає назві групи."
+msgstr "�трибут LDAP, що відповідає назві команди."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1676
-#, fuzzy
-#| msgid "Default: uid"
 msgid "Default: sudoCommand"
-msgstr "Типове значенн�: uid"
+msgstr "Типове значенн�: sudoCommand"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1682
-#, fuzzy
-#| msgid "ldap_user_authorized_host (string)"
 msgid "ldap_sudorule_host (string)"
-msgstr "ldap_user_authorized_host (р�док)"
+msgstr "ldap_sudorule_host (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1685
-#, fuzzy
-#| msgid "The LDAP attribute that corresponds to the user's primary group id."
 msgid ""
 "The LDAP attribute that corresponds to the host name (or host IP address, "
 "host IP network, or host netgroup)"
-msgstr "�трибут LDAP, що відповідає ідентифікатору о�новної групи кори�тувача."
+msgstr ""
+"�трибут LDAP, �кий відповідає назві вузла (або IP-адре�і вузла, IP-мережі "
+"вузла, мережевій групі вузла)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1690
-#, fuzzy
-#| msgid "Default: root"
 msgid "Default: sudoHost"
-msgstr "Типове значенн�: root"
+msgstr "Типове значенн�: sudoHost"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1696
-#, fuzzy
-#| msgid "ldap_user_uid_number (string)"
 msgid "ldap_sudorule_user (string)"
-msgstr "ldap_user_uid_number (р�док)"
+msgstr "ldap_sudorule_user (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1699
-#, fuzzy
-#| msgid "The LDAP attribute that corresponds to the netgroup name."
 msgid ""
 "The LDAP attribute that corresponds to the user name (or UID, group name or "
 "user's netgroup)"
-msgstr "�трибут LDAP, що відповідає назві мережевої групи (netgroup)."
+msgstr ""
+"�трибут LDAP, що відповідає назві імені кори�тувача (або UID, назві групи "
+"або назві мережевої групи кори�тувача)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1703
-#, fuzzy
-#| msgid "Default: uid"
 msgid "Default: sudoUser"
-msgstr "Типове значенн�: uid"
+msgstr "Типове значенн�: sudoUser"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1709
-#, fuzzy
-#| msgid "ldap_uri (string)"
 msgid "ldap_sudorule_option (string)"
-msgstr "ldap_uri (р�док)"
+msgstr "ldap_sudorule_option (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1712
-#, fuzzy
-#| msgid "The LDAP attribute that corresponds to the user's id."
 msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr "�трибут LDAP, що відповідає ідентифікатору кори�тувача."
+msgstr "�трибут LDAP, що відповідає параметрам sudo."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1716
-#, fuzzy
-#| msgid "Default: shadowMin"
 msgid "Default: sudoOption"
-msgstr "Типове значенн�: shadowMin"
+msgstr "Типове значенн�: sudoOption"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1722
-#, fuzzy
-#| msgid "ldap_user_name (string)"
 msgid "ldap_sudorule_runasuser (string)"
-msgstr "ldap_user_name (р�док)"
+msgstr "ldap_sudorule_runasuser (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1725
-#, fuzzy
-#| msgid "The LDAP attribute that corresponds to the user's primary group id."
 msgid ""
 "The LDAP attribute that corresponds to the user name that commands may be "
 "run as."
-msgstr "�трибут LDAP, що відповідає ідентифікатору о�новної групи кори�тувача."
+msgstr ""
+"�трибут LDAP, що відповідає кори�тувачеві, від імені �кого можна виконувати "
+"команди."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1729
-#, fuzzy
-#| msgid "Default: uidNumber"
 msgid "Default: sudoRunAsUser"
-msgstr "Типове значенн�: uidNumber"
+msgstr "Типове значенн�: sudoRunAsUser"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1735
-#, fuzzy
-#| msgid "ldap_user_name (string)"
 msgid "ldap_sudorule_runasgroup (string)"
-msgstr "ldap_user_name (р�док)"
+msgstr "ldap_sudorule_runasgroup (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1738
-#, fuzzy
-#| msgid "The LDAP attribute that corresponds to the group name."
 msgid ""
 "The LDAP attribute that corresponds to the group name or group GID that "
 "commands may be run as."
-msgstr "�трибут LDAP, що відповідає назві групи."
+msgstr ""
+"�трибут LDAP, що відповідає назві групи або GID, від імені �кої можна "
+"виконувати команди."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1742
-#, fuzzy
-#| msgid "Default: posixGroup"
 msgid "Default: sudoRunAsGroup"
-msgstr "Типове значенн�: posixGroup"
+msgstr "Типове значенн�: sudoRunAsGroup"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1748
-#, fuzzy
-#| msgid "ldap_user_uid_number (string)"
 msgid "ldap_sudorule_notbefore (string)"
-msgstr "ldap_user_uid_number (р�док)"
+msgstr "ldap_sudorule_notbefore (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1751
-#, fuzzy
-#| msgid "The LDAP attribute that corresponds to the user's primary group id."
 msgid ""
 "The LDAP attribute that corresponds to the start date/time for when the sudo "
 "rule is valid."
-msgstr "�трибут LDAP, що відповідає ідентифікатору о�новної групи кори�тувача."
+msgstr ""
+"�трибут LDAP, що відповідає даті і ча�у набутт� чинно�ті правилом sudo."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1755
-#, fuzzy
-#| msgid "Default: uidNumber"
 msgid "Default: sudoNotBefore"
-msgstr "Типове значенн�: uidNumber"
+msgstr "Типове значенн�: sudoNotBefore"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1761
-#, fuzzy
-#| msgid "ldap_user_name (string)"
 msgid "ldap_sudorule_notafter (string)"
-msgstr "ldap_user_name (р�док)"
+msgstr "ldap_sudorule_notafter (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1764
-#, fuzzy
-#| msgid "The LDAP attribute that corresponds to the user's primary group id."
 msgid ""
 "The LDAP attribute that corresponds to the expiration date/time, after which "
 "the sudo rule will no longer be valid."
-msgstr "�трибут LDAP, що відповідає ідентифікатору о�новної групи кори�тувача."
+msgstr "�трибут LDAP, що відповідає даті і ча�у втрати чинно�ті правилом sudo."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1769
-#, fuzzy
-#| msgid "Default: filter"
 msgid "Default: sudoNotAfter"
-msgstr "Типове значенн�: filter"
+msgstr "Типове значенн�: sudoNotAfter"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1775
-#, fuzzy
-#| msgid "ldap_access_order (string)"
 msgid "ldap_sudorule_order (string)"
-msgstr "ldap_access_order (р�док)"
+msgstr "ldap_sudorule_order (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1778
-#, fuzzy
-#| msgid "The LDAP attribute that corresponds to the user's id."
 msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr "�трибут LDAP, що відповідає ідентифікатору кори�тувача."
+msgstr "�трибут LDAP, що відповідає пор�дковому номеру правила."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1782
-#, fuzzy
-#| msgid "Default: password"
 msgid "Default: sudoOrder"
-msgstr "Типове значенн�: password"
+msgstr "Типове значенн�: sudoOrder"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1788
-#, fuzzy
-#| msgid "ldap_referrals (boolean)"
 msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr "ldap_referrals (булеве значенн�)"
+msgstr "ldap_sudo_refresh_enabled (булеве значенн�)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1791
@@ -4673,57 +4499,44 @@ msgid ""
 "Enables periodical download of all sudo rules.  The cache is purged before "
 "each update."
 msgstr ""
+"Вмикає періодичне звантаженн� в�іх правил sudo. Перед кожним оновленн�м дані "
+"з кешу вилучають��."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1801
-#, fuzzy
-#| msgid "ldap_enumeration_refresh_timeout (integer)"
 msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr "ldap_enumeration_refresh_timeout (ціле чи�ло)"
+msgstr "ldap_sudo_refresh_timeout (ціле чи�ло)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1804
-#, fuzzy
-#| msgid ""
-#| "The LDAP attribute that contains how many seconds SSSD has to wait before "
-#| "refreshing its cache of enumerated records."
 msgid ""
 "How many seconds SSSD has to wait before refreshing its cache of sudo rules."
 msgstr ""
-"�трибут LDAP, що мі�тить дані щодо кілько�ті �екунд, прот�гом �ких SSSD має "
-"очікувати до оновленн� �вого кешу нумерованих запи�ів."
+"Визначає кількі�ть �екунд, прот�гом �ких SSSD має очікувати до оновленн� "
+"�вого кешу правил sudo."
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ldap.5.xml:1642
-#, fuzzy
-#| msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
 msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr "<placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr "<placeholder type=\"variablelist\" id=\"0\"/>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ldap.5.xml:1815
-#, fuzzy
-#| msgid ""
-#| "Specifies acceptable cipher suites.  Typically this is a colon sperated "
-#| "list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-#| "<manvolnum>5</manvolnum></citerefentry> for format."
 msgid ""
 "This manual page only describes attribute name mapping.  For detailed "
 "explanation of sudo related attribute semantics, see <citerefentry> "
 "<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
 "citerefentry>"
 msgstr ""
-"Визначає прийн�тні комплекти програм дл� шифруванн�. Запи�и у типовому "
-"�пи�ку �лід відокремлювати комами. З форматом можна ознайомити�� на �торінці "
-"довідника до <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry>."
+"�а цій �торінці довідника наведено дані щодо відповідно�ті назв атрибутів. "
+"Докладний опи� �емантики атрибутів, пов’�заних з sudo, можна знайти у "
+"довідці з <citerefentry> <refentrytitle>sudoers.ldap</"
+"refentrytitle><manvolnum>5</manvolnum> </citerefentry>."
 
 #. type: Content of: <reference><refentry><refsect1><title>
 #: sssd-ldap.5.xml:1825
-#, fuzzy
-#| msgid "OPTIONS"
 msgid "AUTOFS OPTIONS"
-msgstr "П�Р�МЕТРИ"
+msgstr "П�Р�МЕТРИ AUTOFS"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ldap.5.xml:1827
@@ -4731,62 +4544,48 @@ msgid ""
 "Please note that the default values correspond to the default schema which "
 "is RFC2307."
 msgstr ""
+"Будь ла�ка, зауважте, що типові значенн� відповідають типовій �хемі, �ку "
+"визначено у RFC2307."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1834
-#, fuzzy
-#| msgid "ldap_user_object_class (string)"
 msgid "ldap_autofs_map_object_class (string)"
-msgstr "ldap_user_object_class (р�док)"
+msgstr "ldap_autofs_map_object_class (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-#, fuzzy
-#| msgid "The object class of a group entry in LDAP."
 msgid "The object class of an automount map entry in LDAP."
-msgstr "Кла� об’єктів запи�у групи у LDAP."
+msgstr "Кла� об’єктів запи�у карти автоматичного монтуванн� у LDAP."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-#, fuzzy
-#| msgid "Default: root"
 msgid "Default: automountMap"
-msgstr "Типове значенн�: root"
+msgstr "Типове значенн�: automountMap"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1847
-#, fuzzy
-#| msgid "ldap_user_name (string)"
 msgid "ldap_autofs_map_name (string)"
-msgstr "ldap_user_name (р�док)"
+msgstr "ldap_autofs_map_name (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1850
-#, fuzzy
-#| msgid "The object class of a group entry in LDAP."
 msgid "The name of an automount map entry in LDAP."
-msgstr "Кла� об’єктів запи�у групи у LDAP."
+msgstr "�азва запи�у карти автоматичного монтуванн� у LDAP."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1853
-#, fuzzy
-#| msgid "Default: uid"
 msgid "Default: ou"
-msgstr "Типове значенн�: uid"
+msgstr "Типове значенн�: ou"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1860
-#, fuzzy
-#| msgid "ldap_user_object_class (string)"
 msgid "ldap_autofs_entry_object_class (string)"
-msgstr "ldap_user_object_class (р�док)"
+msgstr "ldap_autofs_entry_object_class (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1874
-#, fuzzy
-#| msgid "ldap_tls_key (string)"
 msgid "ldap_autofs_entry_key (string)"
-msgstr "ldap_tls_key (р�док)"
+msgstr "ldap_autofs_entry_key (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
@@ -4794,20 +4593,18 @@ msgid ""
 "The key of an automount entry in LDAP. The entry usually corresponds to a "
 "mount point."
 msgstr ""
+"Ключ запи�у автоматичного монтуванн� LDAP. Цей запи� зазвичай відповідає "
+"точні монтуванн�."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:1888
-#, fuzzy
-#| msgid "ldap_user_name (string)"
 msgid "ldap_autofs_entry_value (string)"
-msgstr "ldap_user_name (р�док)"
+msgstr "ldap_autofs_entry_value (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:1895
-#, fuzzy
-#| msgid "Default: shadowInactive"
 msgid "Default: automountInformation"
-msgstr "Типове значенн�: shadowInactive"
+msgstr "Типове значенн�: automountInformation"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ldap.5.xml:1832
@@ -4817,6 +4614,10 @@ msgid ""
 "<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
 "\"variablelist\" id=\"4\"/>"
 msgstr ""
+"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
+"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
+"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
+"\"variablelist\" id=\"4\"/>"
 
 #. type: Content of: <reference><refentry><refsect1><title>
 #: sssd-ldap.5.xml:1904
@@ -4926,37 +4727,29 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:2012
-#, fuzzy
-#| msgid "ldap_search_base (string)"
 msgid "ldap_sudo_search_base (string)"
-msgstr "ldap_search_base (р�док)"
+msgstr "ldap_sudo_search_base (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:2015
-#, fuzzy
-#| msgid "An optional base DN to restrict user searches to a specific subtree."
 msgid ""
 "An optional base DN to restrict sudo rules searches to a specific subtree."
 msgstr ""
-"Додатковий о�новний DN дл� обмеженн� пошуків кори�тувачів певною гілкою "
+"Додатковий о�новний DN дл� обмеженн� пошуків правил sudo певною гілкою "
 "ієрархії."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ldap.5.xml:2034
-#, fuzzy
-#| msgid "ldap_user_search_base (string)"
 msgid "ldap_autofs_search_base (string)"
-msgstr "ldap_user_search_base (р�док)"
+msgstr "ldap_autofs_search_base (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ldap.5.xml:2037
-#, fuzzy
-#| msgid "An optional base DN to restrict user searches to a specific subtree."
 msgid ""
 "An optional base DN to restrict automounter searches to a specific subtree."
 msgstr ""
-"Додатковий о�новний DN дл� обмеженн� пошуків кори�тувачів певною гілкою "
-"ієрархії."
+"Додатковий о�новний DN дл� обмеженн� пошуків за�обу автоматичного монтуванн� "
+"певною гілкою ієрархії."
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ldap.5.xml:1906
@@ -5642,6 +5435,9 @@ msgid ""
 "NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
 "the default Kerberos realm must be set properly in /etc/krb5.conf"
 msgstr ""
+"З�УВ�ЖЕ��Я: на за�тарілих �и�темах (зокрема RHEL 5) дл� надійної роботи у "
+"цьому режимі типову обла�ть дії Kerberos має бути належним чином визначено "
+"у /etc/krb5.conf"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:129
@@ -5682,20 +5478,14 @@ msgstr "Типове значеннÑ�: викориÑ�таннÑ� базової Ð
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:156
-#, fuzzy
-#| msgid "ipa_hbac_search_base (string)"
 msgid "ipa_host_search_base (string)"
-msgstr "ipa_hbac_search_base (р�док)"
+msgstr "ipa_host_search_base (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:159
-#, fuzzy
-#| msgid ""
-#| "Optional. Use the given string as search base for HBAC related objects."
 msgid "Optional. Use the given string as search base for host objects."
 msgstr ""
-"�еобов’�зковий. Викори�тати вказаний р�док �к о�нову пошуку пов’�заних з "
-"HBAC об’єктів."
+"�еобов’�зковий. Викори�тати вказаний р�док �к о�нову пошуку об’єктів вузлів."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:168
@@ -5704,23 +5494,21 @@ msgid ""
 "<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
 "will be ignored."
 msgstr ""
+"Якщо вказано фільтруванн� за довільною базою пошуку і в�тановлено значенн� "
+"False дл� <emphasis>ipa_hbac_support_srchost</emphasis>, фільтр буде "
+"проігноровано."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:180
-#, fuzzy
-#| msgid "ipa_hbac_search_base (string)"
 msgid "ipa_selinux_search_base (string)"
-msgstr "ipa_hbac_search_base (р�док)"
+msgstr "ipa_selinux_search_base (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:183
-#, fuzzy
-#| msgid ""
-#| "Optional. Use the given string as search base for HBAC related objects."
 msgid "Optional. Use the given string as search base for SELinux user maps."
 msgstr ""
-"�еобов’�зковий. Викори�тати вказаний р�док �к о�нову пошуку пов’�заних з "
-"HBAC об’єктів."
+"�еобов’�зковий. Викори�тати вказаний р�док �к о�нову пошуку карт "
+"кори�тувачів SELinux."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
@@ -5857,23 +5645,25 @@ msgid ""
 "Note that if set to <emphasis>False</emphasis>, this option casuses filters "
 "given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
 msgstr ""
+"Зауважте, що �кщо в�тановлено значенн� <emphasis>False</emphasis>, фільтри, "
+"вказані за допомогою параметра <emphasis>ipa_host_search_base</emphasis>, "
+"буде проігноровано;"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:307
-#, fuzzy
-#| msgid "ipa_domain (string)"
 msgid "ipa_automount_location (string)"
-msgstr "ipa_domain (р�док)"
+msgstr "ipa_automount_location (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:310
 msgid "The automounter location this IPA client will be using"
 msgstr ""
+"�дре�а автоматичного монтуванн�, �ку буде викори�товувати цей клієнт IPA"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:313
 msgid "Default: The location named \"default\""
-msgstr ""
+msgstr "Типове значенн�: адре�а з назвою \"default\""
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:319
@@ -5990,213 +5780,158 @@ msgstr "Типове значенн�: fqdn"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:404
-#, fuzzy
-#| msgid "ldap_user_object_class (string)"
 msgid "ipa_selinux_usermap_object_class (string)"
-msgstr "ldap_user_object_class (р�док)"
+msgstr "ipa_selinux_usermap_object_class (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:415
-#, fuzzy
-#| msgid "ldap_user_name (string)"
 msgid "ipa_selinux_usermap_name (string)"
-msgstr "ldap_user_name (р�док)"
+msgstr "ipa_selinux_usermap_name (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:418
-#, fuzzy
-#| msgid "The LDAP attribute that contains the names of the group's members."
 msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr "�трибут LDAP, у �кому мі�т�ть�� імена уча�ників групи."
+msgstr "�трибут LDAP, що мі�тить назву карти кори�тувачів SELinux."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:427
-#, fuzzy
-#| msgid "ipa_netgroup_member_user (string)"
 msgid "ipa_selinux_usermap_member_user (string)"
-msgstr "ipa_netgroup_member_user (р�док)"
+msgstr "ipa_selinux_usermap_member_user (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:430
-#, fuzzy
-#| msgid "The LDAP attribute that contains FQDN of the host."
 msgid ""
 "The LDAP attribute that contains all users / groups this rule match against."
-msgstr "�трибут LDAP, що мі�тить FQDN вузла."
+msgstr ""
+"�трибут LDAP, що мі�тить �пи�ок в�іх кори�тувачів і груп, �ких �то�уєть�� це "
+"правило."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:439
-#, fuzzy
-#| msgid "ipa_netgroup_member_host (string)"
 msgid "ipa_selinux_usermap_member_host (string)"
-msgstr "ipa_netgroup_member_host (р�док)"
+msgstr "ipa_selinux_usermap_member_host (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:442
-#, fuzzy
-#| msgid ""
-#| "The LDAP attribute that contains the (host, user, domain) netgroup "
-#| "triples."
 msgid ""
 "The LDAP attribute that contains all hosts / hostgroups this rule match "
 "against."
 msgstr ""
-"�трибут LDAP, що мі�тить трійки мережевої групи (вузол, кори�тувач, домен)."
+"�трибут LDAP, що мі�тить �пи�ок в�іх вузлів і груп вузлів, �ких �то�уєть�� "
+"це правило."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:451
-#, fuzzy
-#| msgid "ipa_netgroup_member_of (string)"
 msgid "ipa_selinux_usermap_see_also (string)"
-msgstr "ipa_netgroup_member_of (р�док)"
+msgstr "ipa_selinux_usermap_see_also (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:454
-#, fuzzy
-#| msgid ""
-#| "The LDAP attribute that contains the names of the netgroup's members."
 msgid ""
 "The LDAP attribute that contains DN of HBAC rule which can be used for "
 "matching instead of memberUser and memberHost"
 msgstr ""
-"�трибут LDAP, у �кому мі�т�ть�� імена уча�ників мережевої групи (netgroup)."
+"�трибут LDAP, що мі�тить назву домену правила HBAC, �ким можна кори�тувати�� "
+"дл� в�тановленн� відповідно�ті замі�ть memberUser і memberHost."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:459
-#, fuzzy
-#| msgid "Default: false"
 msgid "Default: seeAlso"
-msgstr "Типове значенн�: false"
+msgstr "Типове значенн�: seeAlso"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:464
-#, fuzzy
-#| msgid "ipa_netgroup_member_user (string)"
 msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr "ipa_netgroup_member_user (р�док)"
+msgstr "ipa_selinux_usermap_selinux_user (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:467
-#, fuzzy
-#| msgid "The LDAP attribute that contains FQDN of the host."
 msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr "�трибут LDAP, що мі�тить FQDN вузла."
+msgstr "�трибут LDAP, �кий мі�тить �ам р�док кори�тувача SELinux."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:471
-#, fuzzy
-#| msgid "Default: ipaHost"
 msgid "Default: ipaSELinuxUser"
-msgstr "Типове значенн�: ipaHost"
+msgstr "Типове значенн�: ipaSELinuxUser"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:476
-#, fuzzy
-#| msgid "ldap_user_name (string)"
 msgid "ipa_selinux_usermap_enabled (string)"
-msgstr "ldap_user_name (р�док)"
+msgstr "ipa_selinux_usermap_enabled (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:479
-#, fuzzy
-#| msgid ""
-#| "The LDAP attribute that contains the path to the user's default shell."
 msgid ""
 "The LDAP attribute that contains whether or not is user map enabled for "
 "usage."
 msgstr ""
-"�трибут LDAP, що мі�тить шл�х до типової командної оболонки кори�тувача."
+"�трибут LDAP, що мі�тить дані щодо того, чи можна кори�тувати�� картою "
+"кори�тувачів."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:483
-#, fuzzy
-#| msgid "Default: loginDisabled"
 msgid "Default: ipaEnabledFlag"
-msgstr "Типове значенн�: loginDisabled"
+msgstr "Типове значенн�: ipaEnabledFlag"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:488
-#, fuzzy
-#| msgid "ldap_user_search_filter (string)"
 msgid "ipa_selinux_usermap_user_category (string)"
-msgstr "ldap_user_search_filter (р�док)"
+msgstr "ipa_selinux_usermap_user_category (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:491
-#, fuzzy
-#| msgid "The LDAP attribute that contains FQDN of the host."
 msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr "�трибут LDAP, що мі�тить FQDN вузла."
+msgstr "�трибут LDAP, що мі�тить категорію кори�тувачів, зокрема 'all'."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:495
-#, fuzzy
-#| msgid "Default: homeDirectory"
 msgid "Default: userCategory"
-msgstr "Типове значенн�: homeDirectory"
+msgstr "Типове значенн�: userCategory"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:500
-#, fuzzy
-#| msgid "ldap_user_home_directory (string)"
 msgid "ipa_selinux_usermap_host_category (string)"
-msgstr "ldap_user_home_directory (р�док)"
+msgstr "ipa_selinux_usermap_host_category (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:503
-#, fuzzy
-#| msgid "The LDAP attribute that contains FQDN of the host."
 msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr "�трибут LDAP, що мі�тить FQDN вузла."
+msgstr "�трибут LDAP, що мі�тить категорію вузлів, зокрема 'all'."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:507
-#, fuzzy
-#| msgid "Default: host"
 msgid "Default: hostCategory"
-msgstr "Типове значенн�: host"
+msgstr "Типове значенн�: hostCategory"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:512
-#, fuzzy
-#| msgid "ldap_user_uuid (string)"
 msgid "ipa_selinux_usermap_uuid (string)"
-msgstr "ldap_user_uuid (р�док)"
+msgstr "ipa_selinux_usermap_uuid (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:515
-#, fuzzy
-#| msgid "The LDAP attribute that contains FQDN of the host."
 msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr "�трибут LDAP, що мі�тить FQDN вузла."
+msgstr "�трибут LDAP, що мі�тить унікальний ідентифікатор карти кори�тувачів."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:519
-#, fuzzy
-#| msgid "Default: nsUniqueId"
 msgid "Default: ipaUniqueID"
-msgstr "Типове значенн�: nsUniqueId"
+msgstr "Типове значенн�: ipaUniqueID"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
 #: sssd-ipa.5.xml:524
-#, fuzzy
-#| msgid "ipa_hostname (string)"
 msgid "ipa_host_ssh_public_key (string)"
-msgstr "ipa_hostname (р�док)"
+msgstr "ipa_host_ssh_public_key (р�док)"
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:527
-#, fuzzy
-#| msgid "The LDAP attribute that contains FQDN of the host."
 msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr "�трибут LDAP, що мі�тить FQDN вузла."
+msgstr "�трибут LDAP, �кий мі�тить відкриті ключі SSH вузла."
 
 #. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
 #: sssd-ipa.5.xml:531
-#, fuzzy
-#| msgid "Default: ipaHost"
 msgid "Default: ipaSshPubKey"
-msgstr "Типове значенн�: ipaHost"
+msgstr "Типове значенн�: ipaSshPubKey"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sssd-ipa.5.xml:546
@@ -7418,8 +7153,8 @@ msgid ""
 "not given, it is chosen automatically."
 msgstr ""
 "В�тановити дл� параметра ідентифікатора групи (GID) значенн� "
-"<replaceable>GID</replaceable> </replaceable>. Якщо таке значенн� не буде "
-"вказано, програма вибере його автоматично."
+"<replaceable>GID</replaceable>. Якщо таке значенн� не буде вказано, програма "
+"вибере його автоматично."
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_groupadd.8.xml:60
@@ -7791,27 +7526,21 @@ msgstr ""
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sss_cache.8.xml:10 sss_cache.8.xml:15
-#, fuzzy
-#| msgid "sss_obfuscate"
 msgid "sss_cache"
-msgstr "sss_obfuscate"
+msgstr "sss_cache"
 
 #. type: Content of: <reference><refentry><refnamediv><refpurpose>
 #: sss_cache.8.xml:16
 msgid "perform cache cleanup"
-msgstr ""
+msgstr "виконати �порожненн� кешу"
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_cache.8.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg>"
 msgid ""
 "<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
 "replaceable> </arg>"
 msgstr ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>параметри</"
+"<command>sss_cache</command> <arg choice='opt'> <replaceable>параметри</"
 "replaceable> </arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
@@ -7821,29 +7550,27 @@ msgid ""
 "records are forced to be reloaded from server as soon as related SSSD "
 "backend is online."
 msgstr ""
+"<command>sss_cache</command> �ка�овує визначенн� запи�ів у кеші SSSD. Дані "
+"запи�ів зі �ка�ованими визначенн�ми буде перезавантажено з �ервера у "
+"приму�овому пор�дку, щойно відповідний модуль SSSD отримає до них до�туп."
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:42
-#, fuzzy
-#| msgid ""
-#| "<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
 msgid ""
 "<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
 msgstr ""
-"<option>-u</option>,<option>--uid</option> <replaceable>ідентифікатор "
-"кори�тувача</replaceable>"
+"<option>-u</option>,<option>--user</option> <replaceable>реє�траційні дані</"
+"replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:47
 msgid "Invalidate specific user."
-msgstr ""
+msgstr "Ска�увати визначенн� вказаного кори�тувача."
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:53
-#, fuzzy
-#| msgid "<option>-h</option>,<option>--help</option>"
 msgid "<option>-U</option>,<option>--users</option>"
-msgstr "<option>-h</option>,<option>--help</option>"
+msgstr "<option>-U</option>,<option>--users</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:57
@@ -7851,30 +7578,26 @@ msgid ""
 "Invalidate all user records. This option overrides invalidation of specific "
 "user if it was also set."
 msgstr ""
+"Ска�увати визначенн� в�іх запи�ів. Цей параметр має вищий пріоритет за "
+"параметр �ка�уванн� визначенн� дл� будь-�кого кори�тувача, �кщо такий "
+"параметр вказано."
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:64
-#, fuzzy
-#| msgid ""
-#| "<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-#| "replaceable>"
 msgid ""
 "<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
 msgstr ""
-"<option>-G</option>,<option>--groups</option> <replaceable>ГРУПИ</"
-"replaceable>"
+"<option>-g</option>,<option>--group</option> <replaceable>група</replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:69
 msgid "Invalidate specific group."
-msgstr ""
+msgstr "Ска�увати визначенн� вказаної групи."
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:75
-#, fuzzy
-#| msgid "<option>-r</option>,<option>--remove</option>"
 msgid "<option>-G</option>,<option>--groups</option>"
-msgstr "<option>-r</option>,<option>--remove</option>"
+msgstr "<option>-G</option>,<option>--groups</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:79
@@ -7882,31 +7605,28 @@ msgid ""
 "Invalidate all group records. This option overrides invalidation of specific "
 "group if it was also set."
 msgstr ""
+"Ска�увати визначенн� запи�ів дл� в�іх груп. Цей параметр має вищий пріоритет "
+"за параметр �ка�уванн� визначенн� дл� будь-�кої групи, �кщо такий параметр "
+"вказано."
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:86
-#, fuzzy
-#| msgid ""
-#| "<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-#| "replaceable>"
 msgid ""
 "<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
 "replaceable>"
 msgstr ""
-"<option>-G</option>,<option>--groups</option> <replaceable>ГРУПИ</"
+"<option>-n</option>,<option>--netgroup</option> <replaceable>мережева група</"
 "replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:91
 msgid "Invalidate specific netgroup."
-msgstr ""
+msgstr "Ска�увати визначенн� вказаної мережевої групи."
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:97
-#, fuzzy
-#| msgid "<option>-h</option>,<option>--help</option>"
 msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr "<option>-h</option>,<option>--help</option>"
+msgstr "<option>-N</option>,<option>--netgroups</option>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:101
@@ -7914,52 +7634,44 @@ msgid ""
 "Invalidate all netgroup records. This option overrides invalidation of "
 "specific netgroup if it was also set."
 msgstr ""
+"Ска�увати визначенн� в�іх запи�ів мережевих груп. Цей параметр має вищий "
+"пріоритет за параметр �ка�уванн� визначенн� дл� будь-�кої мережевої групи, "
+"�кщо такий параметр вказано."
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_cache.8.xml:108
-#, fuzzy
-#| msgid ""
-#| "<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-#| "replaceable>"
 msgid ""
 "<option>-d</option>,<option>--domain</option> <replaceable>domain</"
 "replaceable>"
 msgstr ""
-"<option>-d</option>,<option>--domain</option> <replaceable>ДОМЕ�</"
+"<option>-d</option>,<option>--domain</option> <replaceable>домен</"
 "replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_cache.8.xml:113
 msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
+msgstr "Обмежити процедуру �ка�уванн� визначенн� лише певним доменом."
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-#, fuzzy
-#| msgid "sss_userdel"
 msgid "sss_debuglevel"
-msgstr "sss_userdel"
+msgstr "sss_debuglevel"
 
 #. type: Content of: <reference><refentry><refnamediv><refpurpose>
 #: sss_debuglevel.8.xml:16
 msgid "change debug level while SSSD is running"
-msgstr ""
+msgstr "змінити рівень діагно�тики прот�гом �еан�у роботи з SSSD"
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_debuglevel.8.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-#| "arg>"
 msgid ""
 "<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
 "replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
 "replaceable></arg>"
 msgstr ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>параметри</"
+"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
 "replaceable> </arg> <arg "
-"choice='plain'><replaceable>��ЗВ�_ОБЛІКОВОГО_З�ПИСУ</replaceable></arg>"
+"choice='plain'><replaceable>�ОВИЙ_РІВЕ�Ь_ДІ�Г�ОСТИКИ</replaceable></arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_debuglevel.8.xml:32
@@ -7968,53 +7680,43 @@ msgid ""
 "providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
 "running."
 msgstr ""
+"<command>sss_debuglevel</command> змінює рівень діагно�тики за�обу "
+"�по�тереженн� та надавачів даних SSSD на вказане значенн� "
+"<replaceable>�ОВИЙ_РІВЕ�Ь_ДІ�Г�ОСТИКИ</replaceable> під ча� роботи SSSD."
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_debuglevel.8.xml:59
 msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
+msgstr "<replaceable>�ОВИЙ_РІВЕ�Ь_ДІ�Г�ОСТИКИ</replaceable>"
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
 msgid "sss_ssh_authorizedkeys"
-msgstr ""
+msgstr "sss_ssh_authorizedkeys"
 
 #. type: Content of: <reference><refentry><refmeta><manvolnum>
 #: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
 msgid "1"
-msgstr ""
+msgstr "1"
 
 #. type: Content of: <reference><refentry><refnamediv><refpurpose>
 #: sss_ssh_authorizedkeys.1.xml:16
 msgid "get OpenSSH authorized keys"
-msgstr ""
+msgstr "отримати уповноважені ключі OpenSSH"
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_ssh_authorizedkeys.1.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-#| "arg>"
 msgid ""
 "<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
 "<replaceable>options</replaceable> </arg> <arg "
 "choice='plain'><replaceable>USER</replaceable></arg>"
 msgstr ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>параметри</"
-"replaceable> </arg> <arg "
-"choice='plain'><replaceable>��ЗВ�_ОБЛІКОВОГО_З�ПИСУ</replaceable></arg>"
+"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
+"<replaceable>параметри</replaceable> </arg> <arg "
+"choice='plain'><replaceable>КОРИСТУВ�Ч</replaceable></arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:32
-#, fuzzy
-#| msgid ""
-#| "This manual page describes the configuration of LDAP domains for "
-#| "<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</"
-#| "manvolnum> </citerefentry>.  Refer to the <quote>FILE FORMAT</quote> "
-#| "section of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-#| "<manvolnum>5</manvolnum> </citerefentry> manual page for detailed syntax "
-#| "information."
 msgid ""
 "<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
 "<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
@@ -8022,22 +7724,15 @@ msgid ""
 "<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
 "citerefentry> for more information)."
 msgstr ""
-"�а цій �торінці довідника опи�ано налаштуванн� доменів LDAP дл� "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>. Щоб дізнати�� більше про �интак�и� налаштуванн�, зверніть�� "
-"до розділу «ФОРМ�Т Ф�ЙЛІВ» �торінки довідника <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>."
+"<command>sss_ssh_authorizedkeys</command> отримує відкриті ключі SSH дл� "
+"кори�тувача <replaceable>КОРИСТУВ�Ч</replaceable> і виводить їх у форматі "
+"authorized_keys OpenSSH (щоб дізнати�� більше, див. розділ <quote>ФОРМ�Т "
+"Ф�ЙЛІВ AUTHORIZED_KEYS</quote> на �торінці підручника (man) з "
+"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
+"citerefentry>)."
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:41
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>"
 msgid ""
 "<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
 "citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
@@ -8046,27 +7741,22 @@ msgid ""
 "quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
 "<manvolnum>5</manvolnum></citerefentry> options."
 msgstr ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
+"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
+"citerefentry> можна налаштувати на викори�танн� "
+"<command>sss_ssh_authorizedkeys</command> дл� розпізнаванн� кори�тувачів за "
+"відкритими ключами, �кщо програму зібрано з підтримкою параметра "
+"<citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
+"manvolnum></citerefentry> <quote>AuthorizedKeysCommand</quote> або "
+"<quote>PubkeyAgent</quote>."
 
 #. type: Content of: <reference><refentry><refsect1><para><programlisting>
 #: sss_ssh_authorizedkeys.1.xml:58
 #, no-wrap
 msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
+msgstr "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:51
-#, fuzzy
-#| msgid ""
-#| "This manual page describes the configuration of LDAP domains for "
-#| "<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</"
-#| "manvolnum> </citerefentry>.  Refer to the <quote>FILE FORMAT</quote> "
-#| "section of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-#| "<manvolnum>5</manvolnum> </citerefentry> manual page for detailed syntax "
-#| "information."
 msgid ""
 "If <quote>AuthorizedKeysCommand</quote> is supported, "
 "<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
@@ -8074,29 +7764,21 @@ msgid ""
 "in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
 "manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
 msgstr ""
-"�а цій �торінці довідника опи�ано налаштуванн� доменів LDAP дл� "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>. Щоб дізнати�� більше про �интак�и� налаштуванн�, зверніть�� "
-"до розділу «ФОРМ�Т Ф�ЙЛІВ» �торінки довідника <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>."
+"Якщо передбачено підтримку <quote>AuthorizedKeysCommand</quote>, "
+"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
+"citerefentry> можна налаштувати на викори�танн� ключів за допомогою такої "
+"ін�трукції у <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
+"<manvolnum>5</manvolnum></citerefentry>: <placeholder type=\"programlisting"
+"\" id=\"0\"/>"
 
 #. type: Content of: <reference><refentry><refsect1><para><programlisting>
 #: sss_ssh_authorizedkeys.1.xml:69
 #, no-wrap
 msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
+msgstr "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:62
-#, fuzzy
-#| msgid ""
-#| "The IPA provider accepts the same options used by the <citerefentry> "
-#| "<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-#| "citerefentry> identity provider and the <citerefentry> "
-#| "<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-#| "citerefentry> authentication provider with some exceptions described "
-#| "below."
 msgid ""
 "If <quote>PubkeyAgent</quote> is supported, "
 "<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
@@ -8105,28 +7787,23 @@ msgid ""
 "manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
 "\" id=\"0\"/>"
 msgstr ""
-"Ін�трументом наданн� даних IPA викори�товують�� ті �амі параметри, що "
-"викори�товують�� надавачем даних профілів <citerefentry> <refentrytitle>sssd-"
-"ldap</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> та надавачем "
-"даних дл� розпізнаванн� <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> з певними вин�тками, "
-"опи�аними нижче."
+"Якщо передбачено підтримку <quote>PubkeyAgent</quote>, "
+"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
+"citerefentry> може бути налаштовано на викори�танн� ключів за допомогою "
+"такої ін�трукції <citerefentry> <refentrytitle>sshd</refentrytitle> "
+"<manvolnum>8</manvolnum></citerefentry>: <placeholder type=\"programlisting"
+"\" id=\"0\"/>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_ssh_authorizedkeys.1.xml:87
 msgid ""
 "Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
 msgstr ""
+"Шукати відкриті ключі кори�тувачів у домені SSSD <replaceable>ДОМЕ�</"
+"replaceable>."
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_authorizedkeys.1.xml:98
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>"
 msgid ""
 "<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
 "citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
@@ -8134,37 +7811,34 @@ msgid ""
 "<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
 "manvolnum> </citerefentry>."
 msgstr ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
+"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
 "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
+"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
+"manvolnum> </citerefentry>."
 
 #. type: Content of: <reference><refentry><refnamediv><refname>
 #: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
 msgid "sss_ssh_knownhostsproxy"
-msgstr ""
+msgstr "sss_ssh_knownhostsproxy"
 
 #. type: Content of: <reference><refentry><refnamediv><refpurpose>
 #: sss_ssh_knownhostsproxy.1.xml:16
 msgid "get OpenSSH host keys"
-msgstr ""
+msgstr "отримати ключі вузла OpenSSH"
 
 #. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
 #: sss_ssh_knownhostsproxy.1.xml:21
-#, fuzzy
-#| msgid ""
-#| "<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-#| "replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-#| "arg>"
 msgid ""
 "<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
 "<replaceable>options</replaceable> </arg> <arg "
 "choice='plain'><replaceable>HOST</replaceable></arg> <arg "
 "choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
 msgstr ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>параметри</"
-"replaceable> </arg> <arg choice='plain'><replaceable>ГРУП�</replaceable></"
-"arg>"
+"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
+"<replaceable>параметри</replaceable> </arg> <arg "
+"choice='plain'><replaceable>ВУЗОЛ</replaceable></arg> <arg "
+"choice='opt'><replaceable>КОМ��Д�_ПРОКСІ</replaceable></arg>"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_knownhostsproxy.1.xml:33
@@ -8176,6 +7850,13 @@ msgid ""
 "manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
 "pubconf/known_hosts</filename> and estabilishes connection to the host."
 msgstr ""
+"<command>sss_ssh_knownhostsproxy</command> отримує відкриті ключі вузла SSH "
+"дл� вузла <replaceable>ВУЗОЛ</replaceable>, зберігає їх до нетипового файла "
+"OpenSSH known_hosts (щоб дізнати�� більше, ознайомте�� з розділом "
+"<quote>ФОРМ�Т Ф�ЙЛІВ SSH_KNOWN_HOSTS</quote> �торінки підручника (man) "
+"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
+"citerefentry>) за адре�ою <filename>/var/lib/sss/pubconf/known_hosts</"
+"filename> і в�тановлює з’єднанн� з вузлом."
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_knownhostsproxy.1.xml:43
@@ -8183,6 +7864,8 @@ msgid ""
 "If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
 "create the connection to the host instead of opening a socket."
 msgstr ""
+"Якщо вказано параметр <replaceable>КОМ��Д�_ПРОКСІ</replaceable>, замі�ть "
+"відкритт� �окета дл� �творенн� з’єднанн� буде викори�тано відповідну команду."
 
 #. type: Content of: <reference><refentry><refsect1><para><programlisting>
 #: sss_ssh_knownhostsproxy.1.xml:55
@@ -8191,16 +7874,11 @@ msgid ""
 "ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
 "GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
 msgstr ""
+"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
+"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_knownhostsproxy.1.xml:48
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>"
 msgid ""
 "<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
 "citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
@@ -8208,22 +7886,19 @@ msgid ""
 "<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
 "citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
 msgstr ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
+"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
+"citerefentry> можна налаштувати на викори�танн� "
+"<command>sss_ssh_knownhostsproxy</command> дл� розпізнаванн� вузлів за "
+"ключами за допомогою таких ін�трукцій у налаштуванн�х "
+"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
+"citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
 #: sss_ssh_knownhostsproxy.1.xml:69
-#, fuzzy
-#| msgid ""
-#| "<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-#| "replaceable>"
 msgid ""
 "<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
 msgstr ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>КОМЕ�Т�Р</"
-"replaceable>"
+"<option>-p</option>,<option>--port</option> <replaceable>ПОРТ</replaceable>"
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_ssh_knownhostsproxy.1.xml:74
@@ -8231,22 +7906,18 @@ msgid ""
 "Use port <replaceable>PORT</replaceable> to connect to the host.  By "
 "default, port 22 is used."
 msgstr ""
+"Викори�товувати дл� в�тановленн� з’єднанн� з вузлом порт <replaceable>ПОРТ</"
+"replaceable>. Типовим портом є порт 22."
 
 #. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: sss_ssh_knownhostsproxy.1.xml:86
 msgid ""
 "Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
 msgstr ""
+"Шукати відкриті ключі вузлів у домені SSSD <replaceable>ДОМЕ�</replaceable>."
 
 #. type: Content of: <reference><refentry><refsect1><para>
 #: sss_ssh_knownhostsproxy.1.xml:97
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>"
 msgid ""
 "<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
 "citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
@@ -8254,10 +7925,11 @@ msgid ""
 "<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
 "manvolnum> </citerefentry>."
 msgstr ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
+"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
 "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
+"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
+"manvolnum> </citerefentry>."
 
 #. type: Content of: <refsect1><title>
 #: include/service_discovery.xml:2
@@ -8445,13 +8117,14 @@ msgid ""
 "default value as well as the lowest allowed value, 0xFFF0 is the most "
 "verbose mode. This setting overrides the settings from config file."
 msgstr ""
+"Бітова ма�ка, �ка визначає рівні діагно�тики, дані �ких буде показано. "
+"0x0010 — типове і найменше можливе значенн�. 0xFFF0 — найдокладніший режим. "
+"Визначенн� цього параметра має пріоритет над визначенн�м у файлі налаштувань."
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:8
-#, fuzzy
-#| msgid "Currently sssd supports the following values:"
 msgid "Currently supported debug levels:"
-msgstr "У поточній вер�ії sssd передбачено підтримку таких значень:"
+msgstr "Рівні діагно�тики, передбачені у поточній вер�ії:"
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:11
@@ -8459,6 +8132,9 @@ msgid ""
 "<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
 "SSSD from starting up or causes it to cease running."
 msgstr ""
+"<emphasis>0x0010</emphasis>: критичні помилки з аварійним завершенн�м "
+"роботи. В�і помилки, �кі не дають SSSD змоги розпочати або продовжувати "
+"роботу."
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:15
@@ -8467,6 +8143,9 @@ msgid ""
 "the SSSD, but one that indicates that at least one major feature is not "
 "going to work properly."
 msgstr ""
+"<emphasis>0x0020</emphasis>: критичні помилки. Помилки, �кі не призвод�ть до "
+"аварійного завершенн� роботи SSSD, але означають, що одна з о�новних "
+"можливо�тей не працює належним чином."
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:20
@@ -8474,6 +8153,8 @@ msgid ""
 "<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
 "particular request or operation has failed."
 msgstr ""
+"<emphasis>0x0040</emphasis>: �ерйозні помилки. Повідомленн� про такі помилки "
+"означають, що не вдало�� виконати певний запит або дію."
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:24
@@ -8481,37 +8162,31 @@ msgid ""
 "<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
 "percolate down to cause the operation failure of 2."
 msgstr ""
+"<emphasis>0x0080</emphasis>: незначні помилки. Це помилки �кі можуть "
+"призве�ти до помилок під ча� виконанн� дій."
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:28
-#, fuzzy
-#| msgid "<emphasis>2</emphasis>: show informational messages"
 msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr "<emphasis>2</emphasis>: показувати в�і інформаційні повідомленн�"
+msgstr "<emphasis>0x0100</emphasis>: параметри налаштуванн�."
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:31
-#, fuzzy
-#| msgid "<emphasis>s</emphasis> seconds"
 msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr "<emphasis>s</emphasis> — �екунди"
+msgstr "<emphasis>0x0200</emphasis>: дані функцій."
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:34
-#, fuzzy
-#| msgid "<emphasis>3</emphasis>: show all messages and debug information"
 msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-"<emphasis>3</emphasis>: показувати в�і повідомленн� та діагно�тичні дані"
+msgstr "<emphasis>0x0400</emphasis>: повідомленн� тра�уванн� дл� функцій дій."
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:37
-#, fuzzy
-#| msgid "<emphasis>3</emphasis>: show all messages and debug information"
 msgid ""
 "<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
 msgstr ""
-"<emphasis>3</emphasis>: показувати в�і повідомленн� та діагно�тичні дані"
+"<emphasis>0x1000</emphasis>: повідомленн� тра�уванн� дл� функцій "
+"внутрішнього тра�уванн�."
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:40
@@ -8519,14 +8194,13 @@ msgid ""
 "<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
 "may be interesting."
 msgstr ""
+"<emphasis>0x2000</emphasis>: вмі�т внутрішніх змінних функцій, �кий може "
+"бути цікавим."
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:43
-#, fuzzy
-#| msgid "<emphasis>3</emphasis>: show all messages and debug information"
 msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-"<emphasis>3</emphasis>: показувати в�і повідомленн� та діагно�тичні дані"
+msgstr "<emphasis>0x4000</emphasis>: дані тра�уванн� найнижчого рівн�."
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:46
@@ -8534,6 +8208,8 @@ msgid ""
 "To log required debug levels, simply add their numbers together as shown in "
 "following examples:"
 msgstr ""
+"Щоб до журналу було запи�ано дані потрібних рівнів діагно�тики, про�то "
+"додайте відповідні чи�ла, �к це показано у наведених нижче прикладах:"
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:49
@@ -8541,6 +8217,9 @@ msgid ""
 "<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
 "serious failures and function data use 0x0270."
 msgstr ""
+"<emphasis>Example</emphasis>: щоб до журналу було запи�ано дані щодо "
+"критичних помилок з аварійним завершенн�м роботи, критичних помилок, "
+"�ерйозних помилок та дані функцій, �кори�тайте�� рівнем діагно�тики 0x0270."
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:53
@@ -8548,6 +8227,10 @@ msgid ""
 "<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
 "function data, trace messages for internal control functions use 0x1310."
 msgstr ""
+"<emphasis>Приклад</emphasis>: щоб до журналу було запи�ано критичні помилки "
+"з аварійним завершенн�м роботи, параметри налаштуванн�, дані функцій та "
+"повідомленн� тра�уванн� дл� функцій внутрішнього керуванн�, �кори�тайте�� "
+"рівнем 0x1310."
 
 #. type: Content of: <listitem><para>
 #: include/debug_levels.xml:57
@@ -8555,6 +8238,10 @@ msgid ""
 "<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
 "1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
 msgstr ""
+"<emphasis>Зауваженн�</emphasis>: цей новий формат визначенн� рівнів "
+"діагно�тики впроваджено у вер�ії 1.7.0.  Визначенн� у форматах попередніх "
+"вер�ій (чи�ла від 0 до 10) �умі�ні �з поточною вер�ією, але вважають�� "
+"за�тарілими."
 
 #. type: Content of: outside any tag (error?)
 #: include/experimental.xml:1
@@ -8562,9 +8249,6 @@ msgid ""
 "<emphasis> This is an experimental feature, please use http://fedorahosted."
 "org/sssd to report any issues.  </emphasis>"
 msgstr ""
-
-#~ msgid "ldap_purge_cache_timeout"
-#~ msgstr "ldap_purge_cache_timeout"
-
-#~ msgid "Supported services: nss, pam"
-#~ msgstr "Підтримувані �лужби: nss, pam"
+"<emphasis> Цю можливі�ть ще не перевірено до�татнім чином. Будь ла�ка, �кщо "
+"помітите �кі�ь вади, повідомте про них за допомогою на�танов на �торінці "
+"http://fedorahosted.org/sssd.  </emphasis>"
diff --git a/src/man/po/ur.po b/src/man/po/ur.po
deleted file mode 100644
index 8c2722d2f..000000000
--- a/src/man/po/ur.po
+++ /dev/null
@@ -1,6747 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Urdu <trans-urdu@lists.fedoraproject.org>\n"
-"Language: ur\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=2; plural=(n != 1)\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/vi.po b/src/man/po/vi.po
deleted file mode 100644
index 42c2d5103..000000000
--- a/src/man/po/vi.po
+++ /dev/null
@@ -1,6748 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Vietnamese (http://www.transifex.net/projects/p/fedora/team/"
-"vi/)\n"
-"Language: vi\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=1; plural=0\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/zh_CN.po b/src/man/po/zh_CN.po
deleted file mode 100644
index 71e186875..000000000
--- a/src/man/po/zh_CN.po
+++ /dev/null
@@ -1,6748 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Chinese (China) (http://www.transifex.net/projects/p/fedora/"
-"team/zh_CN/)\n"
-"Language: zh_CN\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=1; plural=0\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""
diff --git a/src/man/po/zh_TW.po b/src/man/po/zh_TW.po
deleted file mode 100644
index e5c6c0aef..000000000
--- a/src/man/po/zh_TW.po
+++ /dev/null
@@ -1,6747 +0,0 @@
-# SOME DESCRIPTIVE TITLE
-# Copyright (C) YEAR Red Hat
-# This file is distributed under the same license as the sssd-docs package.
-#
-# Translators:
-msgid ""
-msgstr ""
-"Project-Id-Version: SSSD\n"
-"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2012-02-28 16:51-0500\n"
-"PO-Revision-Date: 2010-12-23 15:35+0000\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: Chinese (Taiwan) <trans-zh_TW@lists.fedoraproject.org>\n"
-"Language: zh_TW\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=1; plural=0\n"
-
-#. type: Content of: <reference><title>
-#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
-#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
-#: sssd.8.xml:5 sss_obfuscate.8.xml:5 sss_useradd.8.xml:5 sssd-krb5.5.xml:5
-#: sss_groupadd.8.xml:5 sss_userdel.8.xml:5 sss_groupdel.8.xml:5
-#: sss_groupshow.8.xml:5 sss_usermod.8.xml:5 sss_cache.8.xml:5
-#: sss_debuglevel.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
-#: sss_ssh_knownhostsproxy.1.xml:5
-msgid "SSSD Manual pages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
-msgid "sss_groupmod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
-#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
-#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
-#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
-#: sss_debuglevel.8.xml:11
-msgid "8"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupmod.8.xml:16
-msgid "modify a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupmod.8.xml:21
-msgid ""
-"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
-#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
-#: sssd.8.xml:29 sss_obfuscate.8.xml:30 sss_useradd.8.xml:30
-#: sssd-krb5.5.xml:21 sss_groupadd.8.xml:30 sss_userdel.8.xml:30
-#: sss_groupdel.8.xml:30 sss_groupshow.8.xml:30 sss_usermod.8.xml:30
-#: sss_cache.8.xml:29 sss_debuglevel.8.xml:30 sss_ssh_authorizedkeys.1.xml:30
-#: sss_ssh_knownhostsproxy.1.xml:31
-msgid "DESCRIPTION"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:32
-msgid ""
-"<command>sss_groupmod</command> modifies the group to reflect the changes "
-"that are specified on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
-#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
-#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
-#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_ssh_authorizedkeys.1.xml:78
-#: sss_ssh_knownhostsproxy.1.xml:65
-msgid "OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
-msgid ""
-"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:48
-msgid ""
-"Append this group to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
-msgid ""
-"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupmod.8.xml:62
-msgid ""
-"Remove this group from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sss_groupmod.8.xml:72 sssd.conf.5.xml:1331 sssd-ldap.5.xml:2096
-#: pam_sss.8.xml:139 sssd_krb5_locator_plugin.8.xml:75 sssd-simple.5.xml:143
-#: sssd-ipa.5.xml:562 sssd.8.xml:191 sss_obfuscate.8.xml:103
-#: sss_useradd.8.xml:167 sssd-krb5.5.xml:451 sss_groupadd.8.xml:58
-#: sss_userdel.8.xml:93 sss_groupdel.8.xml:46 sss_groupshow.8.xml:58
-#: sss_usermod.8.xml:138 sss_ssh_authorizedkeys.1.xml:96
-#: sss_ssh_knownhostsproxy.1.xml:95
-msgid "SEE ALSO"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupmod.8.xml:74
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
-msgid "sssd.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
-#: sssd-ipa.5.xml:11 sssd-krb5.5.xml:11
-msgid "5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
-#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
-#: sssd-ipa.5.xml:12 sssd-krb5.5.xml:12
-msgid "File Formats and Conventions"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
-#: sssd-ipa.5.xml:17 sssd-krb5.5.xml:17
-msgid "the configuration file for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:21
-msgid "FILE FORMAT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:29
-#, no-wrap
-msgid ""
-"                <replaceable>[section]</replaceable>\n"
-"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
-"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
-"            "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:24
-msgid ""
-"The file has an ini-style syntax and consists of sections and parameters. A "
-"section begins with the name of the section in square brackets and continues "
-"until the next section begins. An example of section with single and multi-"
-"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:36
-msgid ""
-"The data types used are string (no quotes needed), integer and bool (with "
-"values of <quote>TRUE/FALSE</quote>)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:41
-msgid ""
-"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
-"(<quote>;</quote>)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:46
-msgid ""
-"All sections can have an optional <replaceable>description</replaceable> "
-"parameter. Its function is only as a label for the section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:52
-msgid ""
-"<filename>sssd.conf</filename> must be a regular file, owned by root and "
-"only root may read from or write to the file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:58
-msgid "SPECIAL SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:61
-msgid "The [sssd] section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:70 sssd.conf.5.xml:1177
-msgid "Section parameters"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:72
-msgid "config_file_version (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:75
-msgid ""
-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
-"version 2."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:81
-msgid "services"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:84
-msgid ""
-"Comma separated list of services that are started when sssd itself starts."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:88
-msgid ""
-"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:94 sssd.conf.5.xml:257
-msgid "reconnection_retries (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:97 sssd.conf.5.xml:260
-msgid ""
-"Number of times services should attempt to reconnect in the event of a Data "
-"Provider crash or restart before they give up"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:102 sssd.conf.5.xml:265
-msgid "Default: 3"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:107
-msgid "domains"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:110
-msgid ""
-"A domain is a database containing user information. SSSD can use more "
-"domains at the same time, but at least one must be configured or SSSD won't "
-"start.  This parameter described the list of domains in the order you want "
-"them to be queried."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:120
-msgid "re_expression (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:123
-msgid ""
-"Regular expression that describes how to parse the string containing user "
-"name and domain into these components."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:127
-msgid ""
-"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
-"which translates to \"the name is everything up to the <quote>@</quote> "
-"sign, the domain everything after that\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:132
-msgid ""
-"PLEASE NOTE: the support for non-unique named subpatterns is not available "
-"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
-"version 7 or higher can support non-unique named subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:139
-msgid ""
-"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
-"P&lt;name&gt;) to label subpatterns."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:146
-msgid "full_name_format (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:149
-msgid ""
-"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
-"manvolnum> </citerefentry>-compatible format that describes how to translate "
-"a (name, domain) tuple into a fully qualified name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:157
-msgid "Default: <quote>%1$s@%2$s</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:162
-msgid "try_inotify (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:165
-msgid ""
-"SSSD monitors the state of resolv.conf to identify when it needs to update "
-"its internal DNS resolver. By default, we will attempt to use inotify for "
-"this, and will fall back to polling resolv.conf every five seconds if "
-"inotify cannot be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:173
-msgid ""
-"There are some limited situations where it is preferred that we should skip "
-"even trying to use inotify. In these rare cases, this option should be set "
-"to 'false'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:179
-msgid ""
-"Default: true on platforms where inotify is supported. False on other "
-"platforms."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:183
-msgid ""
-"Note: this option will have no effect on platforms where inotify is "
-"unavailable. On these platforms, polling will always be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:190
-msgid "krb5_rcache_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:193
-msgid ""
-"Directory on the filesystem where SSSD should store Kerberos replay cache "
-"files."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:197
-msgid ""
-"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
-"SSSD to let libkrb5 decide the appropriate location for the replay cache."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:203
-msgid ""
-"Default: Distribution-specific and specified at build-time. "
-"(__LIBKRB5_DEFAULTS__ if not configured)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:63
-msgid ""
-"Individual pieces of SSSD functionality are provided by special SSSD "
-"services that are started and stopped together with SSSD.  The services are "
-"managed by a special service frequently called <quote>monitor</quote>. The "
-"<quote>[sssd]</quote> section is used to configure the monitor as well as "
-"some other important options like the identity domains.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:216
-msgid "SERVICES SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:218
-msgid ""
-"Settings that can be used to configure different services are described in "
-"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
-"section, for example, for NSS service, the section would be <quote>[nss]</"
-"quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:225
-msgid "General service configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:227
-msgid "These options can be used to configure any service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:231
-msgid "debug_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:235
-msgid "debug_timestamps (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:238
-msgid "Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:241 sssd.conf.5.xml:376 sssd-ldap.5.xml:1328
-#: sssd-ldap.5.xml:1446 sssd-ipa.5.xml:206 sssd-ipa.5.xml:241
-msgid "Default: true"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:246
-msgid "debug_microseconds (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:249
-msgid "Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:252 sssd.conf.5.xml:641 sssd-ldap.5.xml:602
-#: sssd-ldap.5.xml:1260 sssd-ldap.5.xml:1397 sssd-ldap.5.xml:1795
-#: sssd-ipa.5.xml:123 sssd-ipa.5.xml:301 sssd-krb5.5.xml:235
-#: sssd-krb5.5.xml:269 sssd-krb5.5.xml:418
-msgid "Default: false"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:270
-msgid "command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:273
-msgid ""
-"By default, the executable representing this service is called <command>sssd_"
-"${service_name}</command>.  This directive allows to change the executable "
-"name for the service. In the vast majority of configurations, the default "
-"values should suffice."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:281
-msgid "Default: <command>sssd_${service_name}</command>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:289
-msgid "NSS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:291
-msgid ""
-"These options can be used to configure the Name Service Switch (NSS) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:296
-msgid "enum_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:299
-msgid ""
-"How many seconds should nss_sss cache enumerations (requests for info about "
-"all users)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:303
-msgid "Default: 120"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:308
-msgid "entry_cache_nowait_percentage (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:311
-msgid ""
-"The entry cache can be set to automatically update entries in the background "
-"if they are requested beyond a percentage of the entry_cache_timeout value "
-"for the domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:317
-msgid ""
-"For example, if the domain's entry_cache_timeout is set to 30s and "
-"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
-"after 15 seconds past the last cache update will be returned immediately, "
-"but the SSSD will go and update the cache on its own, so that future "
-"requests will not need to block waiting for a cache update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:327
-msgid ""
-"Valid values for this option are 0-99 and represent a percentage of the "
-"entry_cache_timeout for each domain. For performance reasons, this "
-"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
-"disables this feature)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:335
-msgid "Default: 50"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:340
-msgid "entry_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:343
-msgid ""
-"Specifies for how many seconds nss_sss should cache negative cache hits "
-"(that is, queries for invalid database entries, like nonexistent ones)  "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:349 sssd.conf.5.xml:669 sssd-krb5.5.xml:223
-msgid "Default: 15"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:354
-msgid "filter_users, filter_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:357
-msgid ""
-"Exclude certain users from being fetched from the sss NSS database. This is "
-"particularly useful for system accounts. This option can also be set per-"
-"domain or include fully-qualified names to filter only users from the "
-"particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:364
-msgid "Default: root"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:369
-msgid "filter_users_in_groups (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:372
-msgid ""
-"If you want filtered user still be group members set this option to false."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:381
-msgid "override_homedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:390 sssd-krb5.5.xml:166
-msgid "%u"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:391 sssd-krb5.5.xml:167
-msgid "login name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:394 sssd-krb5.5.xml:170
-msgid "%U"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:395
-msgid "UID number"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:398 sssd-krb5.5.xml:188
-msgid "%d"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:399
-msgid "domain name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:402
-msgid "%f"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:403
-msgid "fully qualified user name (user@domain)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:406 sssd-krb5.5.xml:200
-msgid "%%"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:407 sssd-krb5.5.xml:201
-msgid "a literal '%'"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:384
-msgid ""
-"Override the user's home directory. You can either provide an absolute value "
-"or a template. In the template, the following sequences are substituted: "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:413
-msgid "This option can also be set per-domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:418
-msgid "allowed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:421
-msgid ""
-"Restrict user shell to one of the listed values. The order of evaluation is:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:424
-msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:428
-msgid ""
-"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
-"quote>, use the value of the shell_fallback parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:433
-msgid ""
-"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
-"shells</quote>, a nologin shell is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:438
-msgid "An empty string for shell is passed as-is to libc."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:441
-msgid ""
-"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
-"that a restart of the SSSD is required in case a new shell is installed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:445
-msgid "Default: Not set. The user shell is automatically used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:450
-msgid "vetoed_shells (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:453
-msgid "Replace any instance of these shells with the shell_fallback"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:458
-msgid "shell_fallback (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:461
-msgid ""
-"The default shell to use if an allowed shell is not installed on the machine."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:465
-msgid "Default: /bin/sh"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:472
-msgid "PAM configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:474
-msgid ""
-"These options can be used to configure the Pluggable Authentication Module "
-"(PAM) service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:479
-msgid "offline_credentials_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:482
-msgid ""
-"If the authentication provider is offline, how long should we allow cached "
-"logins (in days since the last successful online login)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:487 sssd.conf.5.xml:500
-msgid "Default: 0 (No limit)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:493
-msgid "offline_failed_login_attempts (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:496
-msgid ""
-"If the authentication provider is offline, how many failed login attempts "
-"are allowed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:506
-msgid "offline_failed_login_delay (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:509
-msgid ""
-"The time in minutes which has to pass after offline_failed_login_attempts "
-"has been reached before a new login attempt is possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:514
-msgid ""
-"If set to 0 the user cannot authenticate offline if "
-"offline_failed_login_attempts has been reached. Only a successful online "
-"authentication can enable offline authentication again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:520 sssd.conf.5.xml:573 sssd.conf.5.xml:1093
-msgid "Default: 5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:526
-msgid "pam_verbosity (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:529
-msgid ""
-"Controls what kind of messages are shown to the user during authentication. "
-"The higher the number to more messages are displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:534
-msgid "Currently sssd supports the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:537
-msgid "<emphasis>0</emphasis>: do not show any message"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:540
-msgid "<emphasis>1</emphasis>: show only important messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:544
-msgid "<emphasis>2</emphasis>: show informational messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:547
-msgid "<emphasis>3</emphasis>: show all messages and debug information"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:551 sssd.8.xml:63
-msgid "Default: 1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:556
-msgid "pam_id_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:559
-msgid ""
-"For any PAM request while SSSD is online, the SSSD will attempt to "
-"immediately update the cached identity information for the user in order to "
-"ensure that authentication takes place with the latest information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:565
-msgid ""
-"A complete PAM conversation may perform multiple PAM requests, such as "
-"account management and session opening. This option controls (on a per-"
-"client-application basis) how long (in seconds) we can cache the identity "
-"information to avoid excessive round-trips to the identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:579
-msgid "pam_pwd_expiration_warning (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:582
-msgid "Display a warning N days before the password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:585
-msgid ""
-"Please note that the backend server has to provide information about the "
-"expiration time of the password.  If this information is missing, sssd "
-"cannot display a warning."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:591
-msgid "Default: 7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:599
-msgid "SUDO configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:601
-msgid "These options can be used to configure the sudo service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:608
-msgid "sudo_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:611
-msgid ""
-"For any sudo request that comes while SSSD is online, the SSSD will attempt "
-"to update the cached rules in order to ensure that sudo has the latest "
-"ruleset."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:617
-msgid ""
-"The user may, however, run a couple of sudo commands successively, which "
-"would trigger multiple LDAP requests.  In order to speed up this use-case, "
-"the sudo service maintains an in-memory cache that would be used for "
-"performing fast replies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:624
-msgid ""
-"This option controls how long (in seconds) can the sudo service cache rules "
-"for a user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:628
-msgid "Default: 180"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:633
-msgid "sudo_timed (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:636
-msgid ""
-"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
-"that implement time-dependent sudoers entries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:649
-msgid "AUTOFS configuration options"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:651
-msgid "These options can be used to configure the autofs service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:659
-msgid "autofs_negative_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:662
-msgid ""
-"Specifies for how many seconds should the autofs responder negative cache "
-"hits (that is, queries for invalid map entries, like nonexistent ones) "
-"before asking the back end again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:679
-msgid "DOMAIN SECTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:686
-msgid "min_id,max_id (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:689
-msgid ""
-"UID and GID limits for the domain. If a domain contains an entry that is "
-"outside these limits, it is ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:694
-msgid ""
-"For users, this affects the primary GID limit. The user will not be returned "
-"to NSS if either the UID or the primary GID is outside the range. For non-"
-"primary group memberships, those that are in range will be reported as "
-"expected."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:701
-msgid "Default: 1 for min_id, 0 (no limit) for max_id"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:707
-msgid "timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:710
-msgid ""
-"Timeout in seconds between heartbeats for this domain.  This is used to "
-"ensure that the backend process is alive and capable of answering requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:715 sssd-ldap.5.xml:1131
-msgid "Default: 10"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:721
-msgid "enumerate (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:724
-msgid ""
-"Determines if a domain can be enumerated. This parameter can have one of the "
-"following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:728
-msgid "TRUE = Users and groups are enumerated"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:731
-msgid "FALSE = No enumerations for this domain"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:734 sssd.conf.5.xml:839 sssd.conf.5.xml:893
-msgid "Default: FALSE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:737
-msgid ""
-"Note: Enabling enumeration has a moderate performance impact on SSSD while "
-"enumeration is running. It may take up to several minutes after SSSD startup "
-"to fully complete enumerations.  During this time, individual requests for "
-"information will go directly to LDAP, though it may be slow, due to the "
-"heavy enumeration processing."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:747
-msgid ""
-"While the first enumeration is running, requests for the complete user or "
-"group lists may return no results until it completes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:752
-msgid ""
-"Further, enabling enumeration may increase the time necessary to detect "
-"network disconnection, as longer timeouts are required to ensure that "
-"enumeration lookups are completed successfully.  For more information, refer "
-"to the man pages for the specific id_provider in use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:763
-msgid "entry_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:766
-msgid ""
-"How many seconds should nss_sss consider entries valid before asking the "
-"backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:770
-msgid "Default: 5400"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:776
-msgid "entry_cache_user_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:779
-msgid ""
-"How many seconds should nss_sss consider user entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:783 sssd.conf.5.xml:796 sssd.conf.5.xml:809
-#: sssd.conf.5.xml:822
-msgid "Default: entry_cache_timeout"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:789
-msgid "entry_cache_group_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:792
-msgid ""
-"How many seconds should nss_sss consider group entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:802
-msgid "entry_cache_netgroup_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:805
-msgid ""
-"How many seconds should nss_sss consider netgroup entries valid before "
-"asking the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:815
-msgid "entry_cache_service_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:818
-msgid ""
-"How many seconds should nss_sss consider service entries valid before asking "
-"the backend again"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:828
-msgid "cache_credentials (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:831
-msgid "Determines if user credentials are also cached in the local LDB cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:835
-msgid "User credentials are stored in a SHA512 hash, not in plaintext"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:844
-msgid "account_cache_expiration (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:847
-msgid ""
-"Number of days entries are left in cache after last successful login before "
-"being removed during a cleanup of the cache. 0 means keep forever.  The "
-"value of this parameter must be greater than or equal to "
-"offline_credentials_expiration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:854
-msgid "Default: 0 (unlimited)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:860
-msgid "id_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:863
-msgid "The Data Provider identity backend to use for this domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:867
-msgid "Supported backends:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:870
-msgid "proxy: Support a legacy NSS provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:873
-msgid "local: SSSD internal local provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:876
-msgid "ldap: LDAP provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:882
-msgid "use_fully_qualified_names (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:885
-msgid ""
-"If set to TRUE, all requests to this domain must use fully qualified names. "
-"For example, if used in LOCAL domain that contains a \"test\" user, "
-"<command>getent passwd test</command> wouldn't find the user while "
-"<command>getent passwd test@LOCAL</command> would."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:898
-msgid "auth_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:901
-msgid ""
-"The authentication provider used for the domain.  Supported auth providers "
-"are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:905
-msgid ""
-"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:912
-msgid ""
-"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:919
-msgid ""
-"<quote>proxy</quote> for relaying authentication to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:922
-msgid "<quote>none</quote> disables authentication explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:925
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"authentication requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:931
-msgid "access_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:934
-msgid ""
-"The access control provider used for the domain.  There are two built-in "
-"access providers (in addition to any included in installed backends)  "
-"Internal special providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:940
-msgid "<quote>permit</quote> always allow access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:943
-msgid "<quote>deny</quote> always deny access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:946
-msgid ""
-"<quote>simple</quote> access control based on access or deny lists. See "
-"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry> for more information on configuring the simple "
-"access module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:953
-msgid "Default: <quote>permit</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:958
-msgid "chpass_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:961
-msgid ""
-"The provider which should handle change password operations for the domain.  "
-"Supported change password providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:966
-msgid ""
-"<quote>ipa</quote> to change a password stored in an IPA server.  See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:974
-msgid ""
-"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:982
-msgid ""
-"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring Kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:990
-msgid ""
-"<quote>proxy</quote> for relaying password changes to some other PAM target."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:994
-msgid "<quote>none</quote> disallows password changes explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:997
-msgid ""
-"Default: <quote>auth_provider</quote> is used if it is set and can handle "
-"change password requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1004
-msgid "sudo_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1010
-msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1014
-msgid ""
-"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more information on configuring LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1021
-msgid "<quote>none</quote> disables SUDO explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1024
-msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1030
-msgid "session_provider (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1033
-msgid ""
-"The provider which should handle loading of session settings.  Supported "
-"session providers are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1038
-msgid ""
-"<quote>ipa</quote> to load session settings from an IPA server. See "
-"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> for more information on configuring IPA."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1046
-msgid "<quote>none</quote> disallows fetching session settings explicitly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1049
-msgid ""
-"Default: <quote>id_provider</quote> is used if it is set and can handle "
-"session loading requests."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1056
-msgid "lookup_family_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1059
-msgid ""
-"Provides the ability to select preferred address family to use when "
-"performing DNS lookups."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1063
-msgid "Supported values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1066
-msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1069
-msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1072
-msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1075
-msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1078
-msgid "Default: ipv4_first"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1084
-msgid "dns_resolver_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1087
-msgid ""
-"Defines the amount of time (in seconds) to wait for a reply from the DNS "
-"resolver before assuming that it is unreachable. If this timeout is reached, "
-"the domain will continue to operate in offline mode."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1099
-msgid "dns_discovery_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1102
-msgid ""
-"If service discovery is used in the back end, specifies the domain part of "
-"the service discovery DNS query."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1106
-msgid "Default: Use the domain part of machine's hostname"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1112
-msgid "override_gid (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1115
-msgid "Override the primary GID value with the one specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1121
-msgid "case_sensitive (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1124
-msgid ""
-"Treat user and group names as case sensitive. At the moment, this option is "
-"not supported in the local provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1129
-msgid "Default: True"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:681
-msgid ""
-"These configuration options can be present in a domain configuration "
-"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
-"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1141
-msgid "proxy_pam_target (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1144
-msgid "The proxy target PAM proxies to."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1147
-msgid ""
-"Default: not set by default, you have to take an existing pam configuration "
-"or create a new one and add the service name here."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1155
-msgid "proxy_lib_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1158
-msgid ""
-"The name of the NSS library to use in proxy domains. The NSS functions "
-"searched for in the library are in the form of _nss_$(libName)_$(function), "
-"for example _nss_files_getpwent."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1137
-msgid ""
-"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
-"\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:1170
-msgid "The local domain section"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:1172
-msgid ""
-"This section contains settings for domain that stores users and groups in "
-"SSSD native database, that is, a domain that uses "
-"<replaceable>id_provider=local</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1179
-msgid "default_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1182
-msgid "The default shell for users created with SSSD userspace tools."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1186
-msgid "Default: <filename>/bin/bash</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1191
-msgid "base_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1194
-msgid ""
-"The tools append the login name to <replaceable>base_directory</replaceable> "
-"and use that as the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1199
-msgid "Default: <filename>/home</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1204
-msgid "create_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1207
-msgid ""
-"Indicate if a home directory should be created by default for new users.  "
-"Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1223
-msgid "Default: TRUE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1216
-msgid "remove_homedir (bool)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1219
-msgid ""
-"Indicate if a home directory should be removed by default for deleted "
-"users.  Can be overridden on command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1228
-msgid "homedir_umask (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1231
-msgid ""
-"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
-"on a newly created home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1239
-msgid "Default: 077"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1244
-msgid "skel_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1247
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1257
-msgid "Default: <filename>/etc/skel</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1262
-msgid "mail_dir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1265
-msgid ""
-"The mail spool directory. This is needed to manipulate the mailbox when its "
-"corresponding user account is modified or deleted.  If not specified, a "
-"default value is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1272
-msgid "Default: <filename>/var/mail</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:1277
-msgid "userdel_cmd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1280
-msgid ""
-"The command that is run after a user is removed.  The command us passed the "
-"username of the user being removed as the first and only parameter. The "
-"return code of the command is not taken into account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1286
-msgid "Default: None, no command is run"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:1296 sssd-ldap.5.xml:2064 sssd-simple.5.xml:126
-#: sssd-ipa.5.xml:544 sssd-krb5.5.xml:432
-msgid "EXAMPLE"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:1302
-#, no-wrap
-msgid ""
-"[sssd]\n"
-"domains = LDAP\n"
-"services = nss, pam\n"
-"config_file_version = 2\n"
-"\n"
-"[nss]\n"
-"filter_groups = root\n"
-"filter_users = root\n"
-"\n"
-"[pam]\n"
-"\n"
-"[domain/LDAP]\n"
-"id_provider = ldap\n"
-"ldap_uri = ldap://ldap.example.com\n"
-"ldap_search_base = dc=example,dc=com\n"
-"\n"
-"auth_provider = krb5\n"
-"krb5_server = kerberos.example.com\n"
-"krb5_realm = EXAMPLE.COM\n"
-"cache_credentials = true\n"
-"\n"
-"min_id = 10000\n"
-"max_id = 20000\n"
-"enumerate = False\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1298
-msgid ""
-"The following example shows a typical SSSD config. It does not describe "
-"configuration of the domains themselves - refer to documentation on "
-"configuring domains for more details.  <placeholder type=\"programlisting\" "
-"id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1333
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
-msgid "sssd-ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:23
-msgid ""
-"This manual page describes the configuration of LDAP domains for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for detailed syntax information."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:35
-msgid "You can configure SSSD to use more than one LDAP domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:38
-msgid ""
-"LDAP back end supports id, auth, access and chpass providers. If you want to "
-"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
-"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
-"over an unencrypted channel.  If the LDAP server is used only as an identity "
-"provider, an encrypted channel is not needed. Please refer to "
-"<quote>ldap_access_filter</quote> config option for more information about "
-"using LDAP as an access provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:64
-#: sssd-krb5.5.xml:63
-msgid "CONFIGURATION OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:60
-msgid "ldap_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:63
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference. Refer to the <quote>FAILOVER</"
-"quote> section for more information on failover and server redundancy.  If "
-"not specified, service discovery is enabled. For more information, refer to "
-"the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:70
-msgid "The format of the URI must match the format defined in RFC 2732:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:73
-msgid "ldap[s]://&lt;host&gt;[:port]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:76
-msgid ""
-"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:79
-msgid "example: ldap://[fc00::126:25]:389"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:85
-msgid "ldap_chpass_uri (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:88
-msgid ""
-"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
-"should connect in the order of preference to change the password of a user. "
-"Refer to the <quote>FAILOVER</quote> section for more information on "
-"failover and server redundancy."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:95
-msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:99
-msgid "Default: empty, i.e. ldap_uri is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:105
-msgid "ldap_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:108
-msgid "The default base DN to use for performing LDAP user operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:112
-msgid ""
-"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
-"syntax:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:116
-msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:119
-msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:122
-msgid ""
-"The filter must be a valid LDAP search filter as specified by http://www."
-"ietf.org/rfc/rfc2254.txt"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:126
-msgid "Examples:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:129
-msgid ""
-"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
-"ldap_search_base = dc=example,dc=com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:134
-msgid ""
-"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
-"(host=thishost)?dc=example.com?subtree?"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:137
-msgid ""
-"Note: It is unsupported to have multiple search bases which reference "
-"identically-named objects (for example, groups with the same name in two "
-"different search bases). This will lead to unpredictable behavior on client "
-"machines."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:144
-msgid ""
-"Default: If not set, the value of the defaultNamingContext or namingContexts "
-"attribute from the RootDSE of the LDAP server is used. If "
-"defaultNamingContext does not exists or has an empty value namingContexts is "
-"used.  The namingContexts attribute must have a single value with the DN of "
-"the search base of the LDAP server to make this work. Multiple values are "
-"are not supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:158
-msgid "ldap_schema (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:161
-msgid ""
-"Specifies the Schema Type in use on the target LDAP server.  Depending on "
-"the selected schema, the default attribute names retrieved from the servers "
-"may vary.  The way that some attributes are handled may also differ.  Three "
-"schema types are currently supported: rfc2307 rfc2307bis IPA The main "
-"difference between these schema types is how group memberships are recorded "
-"in the server.  With rfc2307, group members are listed by name in the "
-"<emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, group "
-"members are listed by DN and stored in the <emphasis>member</emphasis> "
-"attribute."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:180
-msgid "Default: rfc2307"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:186
-msgid "ldap_default_bind_dn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "The default bind DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:196
-msgid "ldap_default_authtok_type (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:199
-msgid "The type of the authentication token of the default bind DN."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:203
-msgid "The two mechanisms currently supported are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:206
-msgid "password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:209
-msgid "obfuscated_password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:212
-msgid "Default: password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:218
-msgid "ldap_default_authtok (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:221
-msgid ""
-"The authentication token of the default bind DN.  Only clear text passwords "
-"are currently supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:228
-msgid "ldap_user_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:231
-msgid "The object class of a user entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:234
-msgid "Default: posixAccount"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:240
-msgid "ldap_user_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:243
-msgid "The LDAP attribute that corresponds to the user's login name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:247
-msgid "Default: uid"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:253
-msgid "ldap_user_uid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:256
-msgid "The LDAP attribute that corresponds to the user's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:260
-msgid "Default: uidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:266
-msgid "ldap_user_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:269
-msgid "The LDAP attribute that corresponds to the user's primary group id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:273 sssd-ldap.5.xml:740
-msgid "Default: gidNumber"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:279
-msgid "ldap_user_gecos (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:282
-msgid "The LDAP attribute that corresponds to the user's gecos field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:286
-msgid "Default: gecos"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:292
-msgid "ldap_user_home_directory (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:295
-msgid "The LDAP attribute that contains the name of the user's home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:299
-msgid "Default: homeDirectory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:305
-msgid "ldap_user_shell (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:308
-msgid "The LDAP attribute that contains the path to the user's default shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:312
-msgid "Default: loginShell"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:318
-msgid "ldap_user_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:321
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:325 sssd-ldap.5.xml:766 sssd-ldap.5.xml:878
-msgid "Default: nsUniqueId"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:331
-msgid "ldap_user_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:334 sssd-ldap.5.xml:775 sssd-ldap.5.xml:887
-msgid ""
-"The LDAP attribute that contains timestamp of the last modification of the "
-"parent object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:338 sssd-ldap.5.xml:779 sssd-ldap.5.xml:894
-msgid "Default: modifyTimestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:344
-msgid "ldap_user_shadow_last_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:347
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
-"the last password change)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:357
-msgid "Default: shadowLastChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:363
-msgid "ldap_user_shadow_min (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:366
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:375
-msgid "Default: shadowMin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:381
-msgid "ldap_user_shadow_max (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:384
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
-"password age)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:393
-msgid "Default: shadowMax"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:399
-msgid "ldap_user_shadow_warning (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:402
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password warning period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:412
-msgid "Default: shadowWarning"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:418
-msgid "ldap_user_shadow_inactive (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:421
-msgid ""
-"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
-"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
-"(password inactivity period)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:431
-msgid "Default: shadowInactive"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:437
-msgid "ldap_user_shadow_expire (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:440
-msgid ""
-"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
-"parameter contains the name of an LDAP attribute corresponding to its "
-"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> counterpart (account expiration date)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:450
-msgid "Default: shadowExpire"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:456
-msgid "ldap_user_krb_last_pwd_change (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:459
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time of last password change in "
-"kerberos."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:465
-msgid "Default: krbLastPwdChange"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:471
-msgid "ldap_user_krb_password_expiration (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:474
-msgid ""
-"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
-"an LDAP attribute storing the date and time when current password expires."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:480
-msgid "Default: krbPasswordExpiration"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:486
-msgid "ldap_user_ad_account_expires (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:489
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the expiration time of the account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:494
-msgid "Default: accountExpires"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:500
-msgid "ldap_user_ad_user_account_control (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:503
-msgid ""
-"When using ldap_account_expire_policy=ad, this parameter contains the name "
-"of an LDAP attribute storing the user account control bit field."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:508
-msgid "Default: userAccountControl"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:514
-msgid "ldap_ns_account_lock (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:517
-msgid ""
-"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
-"determines if access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:522
-msgid "Default: nsAccountLock"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:528
-msgid "ldap_user_nds_login_disabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:531
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines if "
-"access is allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:535 sssd-ldap.5.xml:549
-msgid "Default: loginDisabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:541
-msgid "ldap_user_nds_login_expiration_time (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:544
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines until "
-"which date access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:555
-msgid "ldap_user_nds_login_allowed_time_map (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:558
-msgid ""
-"When using ldap_account_expire_policy=nds, this attribute determines the "
-"hours of a day in a week when access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:563
-msgid "Default: loginAllowedTimeMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:569
-msgid "ldap_user_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:572
-msgid ""
-"The LDAP attribute that contains the user's Kerberos User Principal Name "
-"(UPN)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:576
-msgid "Default: krbPrincipalName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:582
-msgid "ldap_user_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:585
-msgid "The LDAP attribute that contains the user's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:592
-msgid "ldap_force_upper_case_realm (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:595
-msgid ""
-"Some directory servers, for example Active Directory, might deliver the "
-"realm part of the UPN in lower case, which might cause the authentication to "
-"fail. Set this option to a non-zero value if you want to use an upper-case "
-"realm."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:608
-msgid "ldap_enumeration_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:611
-msgid ""
-"Specifies how many seconds SSSD has to wait before refreshing its cache of "
-"enumerated records."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:616 sssd-ldap.5.xml:1808
-msgid "Default: 300"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:622
-msgid "ldap_purge_cache_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:625
-msgid ""
-"Determine how often to check the cache for inactive entries (such as groups "
-"with no members and users who have never logged in) and remove them to save "
-"space."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:631
-msgid "Setting this option to zero will disable the cache cleanup operation."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:635
-msgid "Default: 10800 (12 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:641
-msgid "ldap_user_fullname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:644
-msgid "The LDAP attribute that corresponds to the user's full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:648 sssd-ldap.5.xml:727 sssd-ldap.5.xml:828
-#: sssd-ldap.5.xml:919 sssd-ldap.5.xml:1663 sssd-ldap.5.xml:1881
-#: sssd-ipa.5.xml:422
-msgid "Default: cn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:654
-msgid "ldap_user_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:657
-msgid "The LDAP attribute that lists the user's group memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:661 sssd-ipa.5.xml:326
-msgid "Default: memberOf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:667
-msgid "ldap_user_authorized_service (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:670
-msgid ""
-"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
-"use the presence of the authorizedService attribute in the user's LDAP entry "
-"to determine access privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:677
-msgid ""
-"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
-"explicit allow (svc) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:682
-msgid "Default: authorizedService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:688
-msgid "ldap_user_authorized_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:691
-msgid ""
-"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
-"presence of the host attribute in the user's LDAP entry to determine access "
-"privilege."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:697
-msgid ""
-"An explicit deny (!host) is resolved first. Second, SSSD searches for "
-"explicit allow (host) and finally for allow_all (*)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:702
-msgid "Default: host"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:708
-msgid "ldap_group_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:711
-msgid "The object class of a group entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:714
-msgid "Default: posixGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:720
-msgid "ldap_group_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:723
-msgid "The LDAP attribute that corresponds to the group name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:733
-msgid "ldap_group_gid_number (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:736
-msgid "The LDAP attribute that corresponds to the group's id."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:746
-msgid "ldap_group_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:749
-msgid "The LDAP attribute that contains the names of the group's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:753
-msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:759
-msgid "ldap_group_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:762
-msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:772
-msgid "ldap_group_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:785
-msgid "ldap_group_nesting_level (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:788
-msgid ""
-"If ldap_schema is set to a schema format that supports nested groups (e.g. "
-"RFC2307bis), then this option controls how many levels of nesting SSSD will "
-"follow. This option has no effect on the RFC2307 schema."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:795
-msgid "Default: 2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:801
-msgid "ldap_netgroup_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:804
-msgid "The object class of a netgroup entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:807
-msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:811
-msgid "Default: nisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:817
-msgid "ldap_netgroup_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:820
-msgid "The LDAP attribute that corresponds to the netgroup name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:824
-msgid "In IPA provider, ipa_netgroup_name should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:834
-msgid "ldap_netgroup_member (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:837
-msgid "The LDAP attribute that contains the names of the netgroup's members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:841
-msgid "In IPA provider, ipa_netgroup_member should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:845
-msgid "Default: memberNisNetgroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:851
-msgid "ldap_netgroup_triple (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:854
-msgid ""
-"The LDAP attribute that contains the (host, user, domain) netgroup triples."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:858 sssd-ldap.5.xml:891
-msgid "This option is not available in IPA provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:861
-msgid "Default: nisNetgroupTriple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:867
-msgid "ldap_netgroup_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:870
-msgid ""
-"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:874
-msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:884
-msgid "ldap_netgroup_modify_timestamp (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:900
-msgid "ldap_service_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:903
-msgid "The object class of a service entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:906
-msgid "Default: ipService"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:912
-msgid "ldap_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:915
-msgid ""
-"The LDAP attribute that contains the name of service attributes and their "
-"aliases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:925
-msgid "ldap_service_port (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:928
-msgid "The LDAP attribute that contains the port managed by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:932
-msgid "Default: ipServicePort"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:938
-msgid "ldap_service_proto (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:941
-msgid ""
-"The LDAP attribute that contains the protocols understood by this service."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:945
-msgid "Default: ipServiceProtocol"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:951
-msgid "ldap_service_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:954
-msgid "An optional base DN to restrict service searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:958 sssd-ldap.5.xml:1918 sssd-ldap.5.xml:1937
-#: sssd-ldap.5.xml:1956 sssd-ldap.5.xml:2019 sssd-ldap.5.xml:2041
-#: sssd-ipa.5.xml:163 sssd-ipa.5.xml:187
-msgid ""
-"See <quote>ldap_search_base</quote> for information about configuring "
-"multiple search bases."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:963 sssd-ldap.5.xml:1923 sssd-ldap.5.xml:1942
-#: sssd-ldap.5.xml:1961 sssd-ldap.5.xml:2024 sssd-ldap.5.xml:2046
-#: sssd-ipa.5.xml:173 sssd-ipa.5.xml:192
-msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:970
-msgid "ldap_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:973
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches are allowed to run "
-"before they are cancelled and cached results are returned (and offline mode "
-"is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:979
-msgid ""
-"Note: this option is subject to change in future versions of the SSSD. It "
-"will likely be replaced at some point by a series of timeouts for specific "
-"lookup types."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:985 sssd-ldap.5.xml:1027 sssd-ldap.5.xml:1042
-msgid "Default: 6"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:991
-msgid "ldap_enumeration_search_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:994
-msgid ""
-"Specifies the timeout (in seconds) that ldap searches for user and group "
-"enumerations are allowed to run before they are cancelled and cached results "
-"are returned (and offline mode is entered)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1001
-msgid "Default: 60"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1007
-msgid "ldap_network_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1010
-msgid ""
-"Specifies the timeout (in seconds) after which the <citerefentry> "
-"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
-"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
-"manvolnum> </citerefentry> following a <citerefentry> "
-"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
-"citerefentry> returns in case of no activity."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1033
-msgid "ldap_opt_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1036
-msgid ""
-"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
-"will abort if no response is received. Also controls the timeout when "
-"communicating with the KDC in case of SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1048
-msgid "ldap_connection_expire_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1051
-msgid ""
-"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
-"maintained. After this time, the connection will be re-established. If used "
-"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
-"the TGT lifetime)  will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1059
-msgid "Default: 900 (15 minutes)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1065
-msgid "ldap_page_size (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1068
-msgid ""
-"Specify the number of records to retrieve from LDAP in a single request. "
-"Some LDAP servers enforce a maximum limit per-request."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1073
-msgid "Default: 1000"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1079
-msgid "ldap_disable_paging"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1082
-msgid ""
-"Disable the LDAP paging control. This option should be used if the LDAP "
-"server reports that it supports the LDAP paging control in its RootDSE but "
-"it is not enabled or does not behave properly."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1088
-msgid ""
-"Example: OpenLDAP servers with the paging control module installed on the "
-"server but not enabled will report it in the RootDSE but be unable to use it."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1094
-msgid ""
-"Example: 389 DS has a bug where it can only support a one paging control at "
-"a time on a single connection. On busy clients, this can result in some "
-"requests being denied."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1103
-msgid "ldap_deref_threshold (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1106
-msgid ""
-"Specify the number of group members that must be missing from the internal "
-"cache in order to trigger a dereference lookup. If less members are missing, "
-"they are looked up individually."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1112
-msgid ""
-"You can turn off dereference lookups completely by setting the value to 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1116
-msgid ""
-"A dereference lookup is a means of fetching all group members in a single "
-"LDAP call.  Different LDAP servers may implement different dereference "
-"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
-"Directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1124
-msgid ""
-"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
-"filter, then the dereference lookup performance enhancement will be disabled "
-"regardless of this setting."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1137
-msgid "ldap_tls_reqcert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1140
-msgid ""
-"Specifies what checks to perform on server certificates in a TLS session, if "
-"any. It can be specified as one of the following values:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1146
-msgid ""
-"<emphasis>never</emphasis> = The client will not request or check any server "
-"certificate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1150
-msgid ""
-"<emphasis>allow</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, it will be ignored and the session proceeds normally."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1157
-msgid ""
-"<emphasis>try</emphasis> = The server certificate is requested. If no "
-"certificate is provided, the session proceeds normally. If a bad certificate "
-"is provided, the session is immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1163
-msgid ""
-"<emphasis>demand</emphasis> = The server certificate is requested. If no "
-"certificate is provided, or a bad certificate is provided, the session is "
-"immediately terminated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1169
-msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1173
-msgid "Default: hard"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1179
-msgid "ldap_tls_cacert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1182
-msgid ""
-"Specifies the file that contains certificates for all of the Certificate "
-"Authorities that <command>sssd</command> will recognize."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1187 sssd-ldap.5.xml:1205 sssd-ldap.5.xml:1246
-msgid ""
-"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
-"conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1194
-msgid "ldap_tls_cacertdir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1197
-msgid ""
-"Specifies the path of a directory that contains Certificate Authority "
-"certificates in separate individual files. Typically the file names need to "
-"be the hash of the certificate followed by '.0'.  If available, "
-"<command>cacertdir_rehash</command> can be used to create the correct names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1212
-msgid "ldap_tls_cert (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1215
-msgid "Specifies the file that contains the certificate for the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1231 sssd-ldap.5.xml:1979
-#: sssd-ldap.5.xml:2006 sssd-krb5.5.xml:359
-msgid "Default: not set"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1225
-msgid "ldap_tls_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1228
-msgid "Specifies the file that contains the client's key."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1237
-msgid "ldap_tls_cipher_suite (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1240
-msgid ""
-"Specifies acceptable cipher suites.  Typically this is a colon sperated "
-"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> for format."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1253
-msgid "ldap_id_use_start_tls (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1256
-msgid ""
-"Specifies that the id_provider connection must also use <systemitem class="
-"\"protocol\">tls</systemitem> to protect the channel."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1266
-msgid "ldap_sasl_mech (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1269
-msgid ""
-"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
-"supported."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1273 sssd-ldap.5.xml:1428
-msgid "Default: none"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1279
-msgid "ldap_sasl_authid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1282
-msgid ""
-"Specify the SASL authorization id to use.  When GSSAPI is used, this "
-"represents the Kerberos principal used for authentication to the directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1287
-msgid "Default: host/machine.fqdn@REALM"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1293
-msgid "ldap_sasl_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1296
-msgid ""
-"If set to true, the LDAP library would perform a reverse lookup to "
-"canonicalize the host name during a SASL bind."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1301
-msgid "Default: false;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1307
-msgid "ldap_krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1310
-msgid "Specify the keytab to use when using SASL/GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1313
-msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1319
-msgid "ldap_krb5_init_creds (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1322
-msgid ""
-"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
-"action is performed only if SASL is used and the mechanism selected is "
-"GSSAPI."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1334
-msgid "ldap_krb5_ticket_lifetime (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1337
-msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1341
-msgid "Default: 86400 (24 hours)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1347 sssd-krb5.5.xml:74
-msgid "krb5_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1350 sssd-krb5.5.xml:77
-msgid ""
-"Specifies the comma-separated list of IP addresses or hostnames of the "
-"Kerberos servers to which SSSD should connect in the order of preference. "
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
-"colon) may be appended to the addresses or hostnames.  If empty, service "
-"discovery is enabled - for more information, refer to the <quote>SERVICE "
-"DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1362 sssd-krb5.5.xml:89
-msgid ""
-"When using service discovery for KDC or kpasswd servers, SSSD first searches "
-"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
-"none are found."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1367 sssd-krb5.5.xml:94
-msgid ""
-"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
-"While the legacy name is recognized for the time being, users are advised to "
-"migrate their config files to use <quote>krb5_server</quote> instead."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1376 sssd-ipa.5.xml:216 sssd-krb5.5.xml:103
-msgid "krb5_realm (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1379
-msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1382
-msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1388 sssd-ipa.5.xml:231 sssd-krb5.5.xml:409
-msgid "krb5_canonicalize (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1391
-msgid ""
-"Specifies if the host principal should be canonicalized when connecting to "
-"LDAP server. This feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1403
-msgid "ldap_pwd_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1406
-msgid ""
-"Select the policy to evaluate the password expiration on the client side. "
-"The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1411
-msgid ""
-"<emphasis>none</emphasis> - No evaluation on the client side. This option "
-"cannot disable server-side password policies."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1416
-msgid ""
-"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
-"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
-"evaluate if the password has expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1422
-msgid ""
-"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
-"to determine if the password has expired. Use chpass_provider=krb5 to update "
-"these attributes when the password is changed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1434
-msgid "ldap_referrals (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1437
-msgid "Specifies whether automatic referral chasing should be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1441
-msgid ""
-"Please note that sssd only supports referral chasing when it is compiled "
-"with OpenLDAP version 2.4.13 or higher."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1452
-msgid "ldap_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1455
-msgid "Specifies the service name to use when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1459
-msgid "Default: ldap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1465
-msgid "ldap_chpass_dns_service_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1468
-msgid ""
-"Specifies the service name to use to find an LDAP server which allows "
-"password changes when service discovery is enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1473
-msgid "Default: not set, i.e. service discovery is disabled"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1479
-msgid "ldap_access_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1482
-msgid ""
-"If using access_provider = ldap, this option is mandatory. It specifies an "
-"LDAP search filter criteria that must be met for the user to be granted "
-"access on this host. If access_provider = ldap and this option is not set, "
-"it will result in all users being denied access. Use access_provider = allow "
-"to change this default behavior."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1492 sssd-ldap.5.xml:1982
-msgid "Example:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1495
-#, no-wrap
-msgid ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1499
-msgid ""
-"This example means that access to this host is restricted to members of the "
-"\"allowedusers\" group in ldap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1504
-msgid ""
-"Offline caching for this feature is limited to determining whether the "
-"user's last online login was granted access permission. If they were granted "
-"access during their last login, they will continue to be granted access "
-"while offline and vice-versa."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1512 sssd-ldap.5.xml:1562
-msgid "Default: Empty"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1518
-msgid "ldap_account_expire_policy (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1521
-msgid ""
-"With this option a client side evaluation of access control attributes can "
-"be enabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1525
-msgid ""
-"Please note that it is always recommended to use server side access control, "
-"i.e. the LDAP server should deny the bind request with a suitable error code "
-"even if the password is correct."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1532
-msgid "The following values are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1535
-msgid ""
-"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
-"determine if the account is expired."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1540
-msgid ""
-"<emphasis>ad</emphasis>: use the value of the 32bit field "
-"ldap_user_ad_user_account_control and allow access if the second bit is not "
-"set. If the attribute is missing access is granted. Also the expiration time "
-"of the account is checked."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1547
-msgid ""
-"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
-"emphasis>: use the value of ldap_ns_account_lock to check if access is "
-"allowed or not."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1553
-msgid ""
-"<emphasis>nds</emphasis>: the values of "
-"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
-"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
-"If both attributes are missing access is granted."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1568
-msgid "ldap_access_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1571
-msgid "Comma separated list of access control options.  Allowed values are:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1575
-msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1578
-msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1582
-msgid ""
-"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
-"to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1587
-msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1591
-msgid "Default: filter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1594
-msgid ""
-"Please note that it is a configuration error if a value is used more than "
-"once."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1601
-msgid "ldap_deref (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1604
-msgid ""
-"Specifies how alias dereferencing is done when performing a search. The "
-"following options are allowed:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1609
-msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1613
-msgid ""
-"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
-"the base object, but not in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1618
-msgid ""
-"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
-"the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1623
-msgid ""
-"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
-"in locating the base object of the search."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1628
-msgid ""
-"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
-"client libraries)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:51
-msgid ""
-"All of the common configuration options that apply to SSSD domains also "
-"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
-"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
-"\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1639
-msgid "SUDO OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1644
-msgid "ldap_sudorule_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1647
-msgid "The object class of a sudo rule entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1650
-msgid "Default: sudoRole"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1656
-msgid "ldap_sudorule_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1659
-msgid "The LDAP attribute that corresponds to the sudo rule name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1669
-msgid "ldap_sudorule_command (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1672
-msgid "The LDAP attribute that corresponds to the command name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1676
-msgid "Default: sudoCommand"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1682
-msgid "ldap_sudorule_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1685
-msgid ""
-"The LDAP attribute that corresponds to the host name (or host IP address, "
-"host IP network, or host netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1690
-msgid "Default: sudoHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1696
-msgid "ldap_sudorule_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1699
-msgid ""
-"The LDAP attribute that corresponds to the user name (or UID, group name or "
-"user's netgroup)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1703
-msgid "Default: sudoUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1709
-msgid "ldap_sudorule_option (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1712
-msgid "The LDAP attribute that corresponds to the sudo options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1716
-msgid "Default: sudoOption"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1722
-msgid "ldap_sudorule_runasuser (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1725
-msgid ""
-"The LDAP attribute that corresponds to the user name that commands may be "
-"run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1729
-msgid "Default: sudoRunAsUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1735
-msgid "ldap_sudorule_runasgroup (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1738
-msgid ""
-"The LDAP attribute that corresponds to the group name or group GID that "
-"commands may be run as."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1742
-msgid "Default: sudoRunAsGroup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1748
-msgid "ldap_sudorule_notbefore (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1751
-msgid ""
-"The LDAP attribute that corresponds to the start date/time for when the sudo "
-"rule is valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1755
-msgid "Default: sudoNotBefore"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1761
-msgid "ldap_sudorule_notafter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1764
-msgid ""
-"The LDAP attribute that corresponds to the expiration date/time, after which "
-"the sudo rule will no longer be valid."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1769
-msgid "Default: sudoNotAfter"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1775
-msgid "ldap_sudorule_order (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1778
-msgid "The LDAP attribute that corresponds to the ordering index of the rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1782
-msgid "Default: sudoOrder"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1788
-msgid "ldap_sudo_refresh_enabled (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1791
-msgid ""
-"Enables periodical download of all sudo rules.  The cache is purged before "
-"each update."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1801
-msgid "ldap_sudo_refresh_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1804
-msgid ""
-"How many seconds SSSD has to wait before refreshing its cache of sudo rules."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1642
-msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1815
-msgid ""
-"This manual page only describes attribute name mapping.  For detailed "
-"explanation of sudo related attribute semantics, see <citerefentry> "
-"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1825
-msgid "AUTOFS OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1827
-msgid ""
-"Please note that the default values correspond to the default schema which "
-"is RFC2307."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1834
-msgid "ldap_autofs_map_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1837 sssd-ldap.5.xml:1863
-msgid "The object class of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1840 sssd-ldap.5.xml:1867
-msgid "Default: automountMap"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1847
-msgid "ldap_autofs_map_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1850
-msgid "The name of an automount map entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1853
-msgid "Default: ou"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1860
-msgid "ldap_autofs_entry_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1874
-msgid "ldap_autofs_entry_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1877 sssd-ldap.5.xml:1891
-msgid ""
-"The key of an automount entry in LDAP. The entry usually corresponds to a "
-"mount point."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1888
-msgid "ldap_autofs_entry_value (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1895
-msgid "Default: automountInformation"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1832
-msgid ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:1904
-msgid "ADVANCED OPTIONS"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1911
-msgid "ldap_netgroup_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1914
-msgid ""
-"An optional base DN to restrict netgroup searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1930
-msgid "ldap_user_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1933
-msgid "An optional base DN to restrict user searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1949
-msgid "ldap_group_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1952
-msgid "An optional base DN to restrict group searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1968
-msgid "ldap_user_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1971
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict user searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1975
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_user_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
-#: sssd-ldap.5.xml:1985
-#, no-wrap
-msgid ""
-"                            ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-"                        "
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1988
-msgid ""
-"This filter would restrict user searches to users that have their shell set "
-"to /bin/tcsh."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:1995
-msgid "ldap_group_search_filter (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:1998
-msgid ""
-"This option specifies an additional LDAP search filter criteria that "
-"restrict group searches."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2002
-msgid ""
-"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
-"by ldap_group_search_base."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2012
-msgid "ldap_sudo_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2015
-msgid ""
-"An optional base DN to restrict sudo rules searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap.5.xml:2034
-msgid "ldap_autofs_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap.5.xml:2037
-msgid ""
-"An optional base DN to restrict automounter searches to a specific subtree."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:1906
-msgid ""
-"These options are supported by LDAP domains, but they should be used with "
-"caution. Please include them in your configuration only if you know what you "
-"are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2066
-msgid ""
-"The following example assumes that SSSD is correctly configured and LDAP is "
-"set to one of the domains in the <replaceable>[domains]</replaceable> "
-"section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ldap.5.xml:2072
-#, no-wrap
-msgid ""
-"    [domain/LDAP]\n"
-"    id_provider = ldap\n"
-"    auth_provider = ldap\n"
-"    ldap_uri = ldap://ldap.mydomain.org\n"
-"    ldap_search_base = dc=mydomain,dc=org\n"
-"    ldap_tls_reqcert = demand\n"
-"    cache_credentials = true\n"
-"    enumerate = true\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2071 sssd-simple.5.xml:134 sssd-ipa.5.xml:552
-#: sssd-krb5.5.xml:441
-msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap.5.xml:2085 sssd_krb5_locator_plugin.8.xml:61
-msgid "NOTES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2087
-msgid ""
-"The descriptions of some of the configuration options in this manual page "
-"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
-"distribution."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ldap.5.xml:2098
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <refentryinfo>
-#: pam_sss.8.xml:8 include/upstream.xml:2
-msgid ""
-"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
-"fedorahosted.org/sssd</orgname>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: pam_sss.8.xml:13 pam_sss.8.xml:18
-msgid "pam_sss"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: pam_sss.8.xml:19
-msgid "PAM module for SSSD"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: pam_sss.8.xml:24
-msgid ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:45
-msgid ""
-"<command>pam_sss.so</command> is the PAM interface to the System Security "
-"Services daemon (SSSD). Errors and results are logged through <command>syslog"
-"(3)</command> with the LOG_AUTHPRIV facility."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:55
-msgid "<option>quiet</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:58
-msgid "Suppress log messages for unknown users."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:63
-msgid "<option>forward_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:66
-msgid ""
-"If <option>forward_pass</option> is set the entered password is put on the "
-"stack for other PAM modules to use."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:73
-msgid "<option>use_first_pass</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:76
-msgid ""
-"The argument use_first_pass forces the module to use a previous stacked "
-"modules password and will never prompt the user - if no password is "
-"available or the password is not appropriate, the user will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:84
-msgid "<option>use_authtok</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:87
-msgid ""
-"When password changing enforce the module to set the new password to the one "
-"provided by a previously stacked password module."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: pam_sss.8.xml:94
-msgid "<option>retry=N</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:97
-msgid ""
-"If specified the user is asked another N times for a password if "
-"authentication fails. Default is 0."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: pam_sss.8.xml:99
-msgid ""
-"Please note that this option might not work as expected if the application "
-"calling PAM handles the user dialog on its own. A typical example is "
-"<command>sshd</command> with <option>PasswordAuthentication</option>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:110
-msgid "MODULE TYPES PROVIDED"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:111
-msgid ""
-"All module types (<option>account</option>, <option>auth</option>, "
-"<option>password</option> and <option>session</option>) are provided."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: pam_sss.8.xml:117
-msgid "FILES"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:118
-msgid ""
-"If a password reset by root fails, because the corresponding SSSD provider "
-"does not support password resets, an individual message can be displayed. "
-"This message can e.g. contain instructions about how to reset a password."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:123
-msgid ""
-"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
-"filename> where LOC stands for a locale string returned by <citerefentry> "
-"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
-"citerefentry>. If there is no matching file the content of "
-"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
-"the owner of the files and only root may have read and write permissions "
-"while all other users must have only read permissions."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:133
-msgid ""
-"These files are searched in the directory <filename>/etc/sssd/customize/"
-"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
-"displayed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: pam_sss.8.xml:141
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
-msgid "sssd_krb5_locator_plugin"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:22
-msgid ""
-"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
-"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
-"libraries what Realm and which KDC to use.  Typically this is done in "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
-"To simplify the configuration the Realm and the KDC can be defined in "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> as described in <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry> puts the Realm and the name or IP address of the KDC into "
-"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
-"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
-"libraries it reads and evaluates these variables and returns them to the "
-"libraries."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:63
-msgid ""
-"Not all Kerberos implementations support the use of plugins. If "
-"<command>sssd_krb5_locator_plugin</command> is not available on your system "
-"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:69
-msgid ""
-"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-"debug messages will be sent to stderr."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd_krb5_locator_plugin.8.xml:77
-msgid ""
-"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
-msgid "sssd-simple"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd-simple.5.xml:17
-msgid "the configuration file for SSSD's 'simple' access-control provider"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:24
-msgid ""
-"This manual page describes the configuration of the simple access-control "
-"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
-"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
-"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:38
-msgid ""
-"The simple access provider grants or denies access based on an access or "
-"deny list of user or group names. The following rules apply:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:43
-msgid "If all lists are empty, access is granted"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:47
-msgid ""
-"If any list is provided, the order of evaluation is allow,deny. This means "
-"that any matching deny rule will supersede any matched allow rule."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:54
-msgid ""
-"If either or both \"allow\" lists are provided, all users are denied unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd-simple.5.xml:60
-msgid ""
-"If only \"deny\" lists are provided, all users are granted access unless "
-"they appear in the list."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:78
-msgid "simple_allow_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:81
-msgid "Comma separated list of users who are allowed to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:88
-msgid "simple_deny_users (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:91
-msgid "Comma separated list of users who are explicitly denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:97
-msgid "simple_allow_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:100
-msgid ""
-"Comma separated list of groups that are allowed to log in. This applies only "
-"to groups within this SSSD domain. Local groups are not evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-simple.5.xml:108
-msgid "simple_deny_groups (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-simple.5.xml:111
-msgid ""
-"Comma separated list of groups that are explicitly denied access. This "
-"applies only to groups within this SSSD domain. Local groups are not "
-"evaluated."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:70 sssd-ipa.5.xml:65
-msgid ""
-"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
-"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> manual page for details on the configuration of an SSSD "
-"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:120
-msgid ""
-"Please note that it is an configuration error if both, simple_allow_users "
-"and simple_deny_users, are defined."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:128
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the simple access provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-simple.5.xml:135
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    access_provider = simple\n"
-"    simple_allow_users = user1, user2\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-simple.5.xml:145
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
-msgid "sssd-ipa"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:23
-msgid ""
-"This manual page describes the configuration of the IPA provider for "
-"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
-"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
-"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:36
-msgid ""
-"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
-"the freeipa.org web site for information about IPA servers.)  This provider "
-"requires that the machine be joined to the IPA domain; configuration is "
-"almost entirely self-discovered and obtained directly from the server."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:43
-msgid ""
-"The IPA provider accepts the same options used by the <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
-"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
-"provider with some exceptions described below."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:55
-msgid ""
-"However, it is neither necessary nor recommended to set these options.  IPA "
-"provider can also be used as an access and chpass provider. As an access "
-"provider it uses HBAC (host-based access control) rules. Please refer to "
-"freeipa.org for more information about HBAC. No configuration of access "
-"provider is required on the client side."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:72
-msgid "ipa_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:75
-msgid ""
-"Specifies the name of the IPA domain.  This is optional. If not provided, "
-"the configuration domain name is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:83
-msgid "ipa_server (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:86
-msgid ""
-"The comma-separated list of IP addresses or hostnames of the IPA servers to "
-"which SSSD should connect in the order of preference. For more information "
-"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
-"This is optional if autodiscovery is enabled.  For more information on "
-"service discovery, refer to the the <quote>SERVICE DISCOVERY</quote> section."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:99
-msgid "ipa_hostname (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:102
-msgid ""
-"Optional. May be set on machines where the hostname(5) does not reflect the "
-"fully qualified name used in the IPA domain to identify this host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:110
-msgid "ipa_dyndns_update (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:113
-msgid ""
-"Optional. This option tells SSSD to automatically update the DNS server "
-"built into FreeIPA v2 with the IP address of this client."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:118
-msgid ""
-"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
-"the default Kerberos realm must be set properly in /etc/krb5.conf"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:129
-msgid "ipa_dyndns_iface (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:132
-msgid ""
-"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
-"interface whose IP address should be used for dynamic DNS updates."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:137
-msgid "Default: Use the IP address of the IPA LDAP connection"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:143
-msgid "ipa_hbac_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:146
-msgid "Optional. Use the given string as search base for HBAC related objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:150
-msgid "Default: Use base DN"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:156
-msgid "ipa_host_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:159
-msgid "Optional. Use the given string as search base for host objects."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:168
-msgid ""
-"If filter is given in any of search bases and "
-"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
-"will be ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:180
-msgid "ipa_selinux_search_base (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:183
-msgid "Optional. Use the given string as search base for SELinux user maps."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:199 sssd-krb5.5.xml:229
-msgid "krb5_validate (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:202 sssd-krb5.5.xml:232
-msgid ""
-"Verify with the help of krb5_keytab that the TGT obtained has not been "
-"spoofed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:209
-msgid ""
-"Note that this default differs from the traditional Kerberos provider back "
-"end."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:219
-msgid ""
-"The name of the Kerberos realm. This is optional and defaults to the value "
-"of <quote>ipa_domain</quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:223
-msgid ""
-"The name of the Kerberos realm has a special meaning in IPA - it is "
-"converted into the base DN to use for performing LDAP operations."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:234
-msgid ""
-"Specifies if the host and user principal should be canonicalized when "
-"connecting to IPA LDAP and also for AS requests. This feature is available "
-"with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:247
-msgid "ipa_hbac_refresh (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:250
-msgid ""
-"The amount of time between lookups of the HBAC rules against the IPA server. "
-"This will reduce the latency and load on the IPA server if there are many "
-"access-control requests made in a short period."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:257
-msgid "Default: 5 (seconds)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:262
-msgid "ipa_hbac_treat_deny_as (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:265
-msgid ""
-"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
-"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
-"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
-"client will support two modes of operation during this transition period:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:274
-msgid ""
-"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
-"users will be denied access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:279
-msgid ""
-"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
-"careful with this option, as it may result in opening unintended access."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:284
-msgid "Default: DENY_ALL"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:289
-msgid "ipa_hbac_support_srchost (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:292
-msgid ""
-"If this is set to false, then srchost as given to SSSD by PAM will be "
-"ignored."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:296
-msgid ""
-"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
-"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:307
-msgid "ipa_automount_location (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:310
-msgid "The automounter location this IPA client will be using"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:313
-msgid "Default: The location named \"default\""
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:319
-msgid "ipa_netgroup_member_of (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:322
-msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:331
-msgid "ipa_netgroup_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:334
-msgid ""
-"The LDAP attribute that lists system users and groups that are direct "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:339 sssd-ipa.5.xml:434
-msgid "Default: memberUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:344
-msgid "ipa_netgroup_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:347
-msgid ""
-"The LDAP attribute that lists hosts and host groups that are direct members "
-"of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:351 sssd-ipa.5.xml:446
-msgid "Default: memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:356
-msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:359
-msgid ""
-"The LDAP attribute that lists FQDNs of hosts and host groups that are "
-"members of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:363
-msgid "Default: externalHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:368
-msgid "ipa_netgroup_domain (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:371
-msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:375
-msgid "Default: nisDomainName"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:381
-msgid "ipa_host_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:407
-msgid "The object class of a host entry in LDAP."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:387 sssd-ipa.5.xml:410
-msgid "Default: ipaHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:392
-msgid "ipa_host_fqdn (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:395
-msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:398
-msgid "Default: fqdn"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:404
-msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:415
-msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:418
-msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:427
-msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:430
-msgid ""
-"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:439
-msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:442
-msgid ""
-"The LDAP attribute that contains all hosts / hostgroups this rule match "
-"against."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:451
-msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:454
-msgid ""
-"The LDAP attribute that contains DN of HBAC rule which can be used for "
-"matching instead of memberUser and memberHost"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:459
-msgid "Default: seeAlso"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:464
-msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:467
-msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:471
-msgid "Default: ipaSELinuxUser"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:476
-msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:479
-msgid ""
-"The LDAP attribute that contains whether or not is user map enabled for "
-"usage."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:483
-msgid "Default: ipaEnabledFlag"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:488
-msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:491
-msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:495
-msgid "Default: userCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:500
-msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:503
-msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:507
-msgid "Default: hostCategory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:512
-msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:515
-msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:519
-msgid "Default: ipaUniqueID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ipa.5.xml:524
-msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:527
-msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ipa.5.xml:531
-msgid "Default: ipaSshPubKey"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:546
-msgid ""
-"The following example assumes that SSSD is correctly configured and example."
-"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
-"This examples shows only the ipa provider-specific options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-ipa.5.xml:553
-#, no-wrap
-msgid ""
-"    [domain/example.com]\n"
-"    id_provider = ipa\n"
-"    ipa_server = ipaserver.example.com\n"
-"    ipa_hostname = myhost.example.com\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-ipa.5.xml:564
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd.8.xml:10 sssd.8.xml:15
-msgid "sssd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sssd.8.xml:16
-msgid "System Security Services Daemon"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sssd.8.xml:21
-msgid ""
-"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:31
-msgid ""
-"<command>SSSD</command> provides a set of daemons to manage access to remote "
-"directories and authentication mechanisms. It provides an NSS and PAM "
-"interface toward the system and a pluggable backend system to connect to "
-"multiple different account sources as well as D-Bus interface. It is also "
-"the basis to provide client auditing and policy services for projects like "
-"FreeIPA. It provides a more robust database to store local users as well as "
-"extended user data."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:46
-msgid ""
-"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:53
-msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:57
-msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:60
-msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:69
-msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:73
-msgid ""
-"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:76
-msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:79
-msgid "Default: 0"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:85
-msgid "<option>-f</option>,<option>--debug-to-files</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:89
-msgid ""
-"Send the debug output to files instead of stderr. By default, the log files "
-"are stored in <filename>/var/log/sssd</filename> and there are separate log "
-"files for every SSSD service and domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:97
-msgid "<option>-D</option>,<option>--daemon</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:101
-msgid "Become a daemon after starting up."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:107
-msgid "<option>-i</option>,<option>--interactive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:111
-msgid "Run in the foreground, don't become a daemon."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:117 sss_debuglevel.8.xml:42
-msgid "<option>-c</option>,<option>--config</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:121 sss_debuglevel.8.xml:46
-msgid ""
-"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
-"conf</filename>. For reference on the config file syntax and options, "
-"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:135
-msgid "<option>--version</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:139
-msgid "Print version number and exit."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.8.xml:147
-msgid "Signals"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:150
-msgid "SIGTERM/SIGINT"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:153
-msgid ""
-"Informs the SSSD to gracefully terminate all of its child processes and then "
-"shut down the monitor."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:159
-msgid "SIGHUP"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:162
-msgid ""
-"Tells the SSSD to stop writing to its current debug file descriptors and to "
-"close and reopen them. This is meant to facilitate log rolling with programs "
-"like logrotate."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:170
-msgid "SIGUSR1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:173
-msgid ""
-"Tells the SSSD to simulate offline operation for one minute. This is mostly "
-"useful for testing purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.8.xml:179
-msgid "SIGUSR2"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.8.xml:182
-msgid ""
-"Tells the SSSD to go online immediately. This is mostly useful for testing "
-"purposes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.8.xml:193
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
-msgid "sss_obfuscate"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_obfuscate.8.xml:16
-msgid "obfuscate a clear text password"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_obfuscate.8.xml:21
-msgid ""
-"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:32
-msgid ""
-"<command>sss_obfuscate</command> converts a given password into human-"
-"unreadable format and places it into appropriate domain section of the SSSD "
-"config file."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:37
-msgid ""
-"The cleartext password is read from standard input or entered "
-"interactively.  The obfuscated password is put into "
-"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
-"<quote>ldap_default_authtok_type</quote> parameter is set to "
-"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry> for more details on these parameters."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:49
-msgid ""
-"Please note that obfuscating the password provides <emphasis>no real "
-"security benefit</emphasis> as it is still possible for an attacker to "
-"reverse-engineer the password back. Using better authentication mechanisms "
-"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
-"advised."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:63
-msgid "<option>-s</option>,<option>--stdin</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:67
-msgid "The password to obfuscate will be read from standard input."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:82
-#: sss_ssh_knownhostsproxy.1.xml:81
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:79
-msgid ""
-"The SSSD domain to use the password in. The default name is <quote>default</"
-"quote>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_obfuscate.8.xml:86
-msgid ""
-"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:91
-msgid "Read the config file specified by the positional parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_obfuscate.8.xml:95
-msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_obfuscate.8.xml:105
-msgid ""
-"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
-msgid "sss_useradd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_useradd.8.xml:16
-msgid "create a new user"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_useradd.8.xml:21
-msgid ""
-"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:32
-msgid ""
-"<command>sss_useradd</command> creates a new user account using the values "
-"specified on the command line plus the default values from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:43
-msgid ""
-"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:48
-msgid ""
-"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:55 sss_usermod.8.xml:43
-msgid ""
-"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:60 sss_usermod.8.xml:48
-msgid ""
-"Any text string describing the user. Often used as the field for the user's "
-"full name."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:67 sss_usermod.8.xml:55
-msgid ""
-"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:72
-msgid ""
-"The home directory of the user account.  The default is to append the "
-"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
-"that as the home directory.  The base that is prepended before "
-"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
-"baseDirectory</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:82 sss_usermod.8.xml:66
-msgid ""
-"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:87
-msgid ""
-"The user's login shell. The default is currently <filename>/bin/bash</"
-"filename>.  The default can be changed with <quote>user_defaults/"
-"defaultShell</quote> setting in sssd.conf."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:96
-msgid ""
-"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:101
-msgid "A list of existing groups this user is also a member of."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:107
-msgid "<option>-m</option>,<option>--create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:111
-msgid ""
-"Create the user's home directory if it does not exist. The files and "
-"directories contained in the skeleton directory (which can be defined with "
-"the -k option or in the config file) will be copied to the home directory."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:121
-msgid "<option>-M</option>,<option>--no-create-home</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:125
-msgid ""
-"Do not create the user's home directory. Overrides configuration settings."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:132
-msgid ""
-"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:137
-msgid ""
-"The skeleton directory, which contains files and directories to be copied in "
-"the user's home directory, when the home directory is created by "
-"<command>sss_useradd</command>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:143
-msgid ""
-"This option is only valid if the <option>-m</option> (or <option>--create-"
-"home</option>) option is specified, or creation of home directories is set "
-"to TRUE in the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
-msgid ""
-"<option>-Z</option>,<option>--selinux-user</option> "
-"<replaceable>SELINUX_USER</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_useradd.8.xml:157
-msgid ""
-"The SELinux user for the user's login. If not specified, the system default "
-"will be used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_useradd.8.xml:169
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
-msgid "sssd-krb5"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:23
-msgid ""
-"This manual page describes the configuration of the Kerberos 5 "
-"authentication backend for <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
-"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
-"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:36
-msgid ""
-"The Kerberos 5 authentication backend contains auth and chpass providers. It "
-"must be paired with identity provider in order to function properly (for "
-"example, id_provider = ldap). Some information required by the Kerberos 5 "
-"authentication backend must be provided by the identity provider, such as "
-"the user's Kerberos Principal Name (UPN). The configuration of the identity "
-"provider should have an entry to specify the UPN. Please refer to the man "
-"page for the applicable identity provider for details on how to configure "
-"this."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:47
-msgid ""
-"This backend also provides access control based on the .k5login file in the "
-"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
-"Please note that an empty .k5login file will deny all access to this user. "
-"To activate this feature use 'access_provider = krb5' in your sssd "
-"configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:55
-msgid ""
-"In the case where the UPN is not available in the identity backend "
-"<command>sssd</command> will construct a UPN using the format "
-"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:106
-msgid ""
-"The name of the Kerberos realm. This option is required and must be "
-"specified."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:113
-msgid "krb5_kpasswd (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:116
-msgid ""
-"If the change password service is not running on the KDC alternative servers "
-"can be defined here. An optional port number (preceded by a colon) may be "
-"appended to the addresses or hostnames."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:122
-msgid ""
-"For more information on failover and server redundancy, see the "
-"<quote>FAILOVER</quote> section.  Please note that even if there are no more "
-"kpasswd servers to try the back end is not switch to offline if "
-"authentication against the KDC is still possible."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:129
-msgid "Default: Use the KDC"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:135
-msgid "krb5_ccachedir (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:138
-msgid ""
-"Directory to store credential caches. All the substitution sequences of "
-"krb5_ccname_template can be used here, too, except %d and %P. If the "
-"directory does not exist it will be created. If %u, %U, %p or %h are used a "
-"private directory belonging to the user is created. Otherwise a public "
-"directory with restricted deletion flag (aka sticky bit, see <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> for details) is created."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:151
-msgid "Default: /tmp"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:157
-msgid "krb5_ccname_template (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:171
-msgid "login UID"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:174
-msgid "%p"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:175
-msgid "principal name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:179
-msgid "%r"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:180
-msgid "realm name"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:183
-msgid "%h"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:184
-msgid "home directory"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:189
-msgid "value of krb5ccache_dir"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:194
-msgid "%P"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:195
-msgid "the process ID of the sssd client"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:160
-msgid ""
-"Location of the user's credential cache. Currently only file based "
-"credential caches are supported. In the template the following sequences are "
-"substituted: <placeholder type=\"variablelist\" id=\"0\"/> If the template "
-"ends with 'XXXXXX' mkstemp(3) is used to create a unique filename in a safe "
-"way."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:209
-msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:215
-msgid "krb5_auth_timeout (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:218
-msgid ""
-"Timeout in seconds after an online authentication or change password request "
-"is aborted. If possible the authentication request is continued offline."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:241
-msgid "krb5_keytab (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:244
-msgid ""
-"The location of the keytab to use when validating credentials obtained from "
-"KDCs."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:248
-msgid "Default: /etc/krb5.keytab"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:254
-msgid "krb5_store_password_if_offline (boolean)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:257
-msgid ""
-"Store the password of the user if the provider is offline and use it to "
-"request a TGT when the provider gets online again."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:262
-msgid ""
-"Please note that this feature currently only available on a Linux platform. "
-"Passwords stored in this way are kept in plaintext in the kernel keyring and "
-"are potentially accessible by the root user (with difficulty)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:275
-msgid "krb5_renewable_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:278
-msgid ""
-"Request a renewable ticket with a total lifetime given by an integer "
-"immediately followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:283 sssd-krb5.5.xml:319
-msgid "<emphasis>s</emphasis> seconds"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:286 sssd-krb5.5.xml:322
-msgid "<emphasis>m</emphasis> minutes"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:289 sssd-krb5.5.xml:325
-msgid "<emphasis>h</emphasis> hours"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:328
-msgid "<emphasis>d</emphasis> days."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:331
-msgid "If there is no delimiter <emphasis>s</emphasis> is assumed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:299
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"renewable lifetime to one and a half hours please use '90m' instead of "
-"'1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:305
-msgid "Default: not set, i.e. the TGT is not renewable"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:311
-msgid "krb5_lifetime (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:314
-msgid ""
-"Request ticket with a with a lifetime given by an integer immediately "
-"followed by one of the following delimiters:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:335
-msgid ""
-"Please note that it is not possible to mix units.  If you want to set the "
-"lifetime to one and a half hours please use '90m' instead of '1h30m'."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:340
-msgid ""
-"Default: not set, i.e. the default ticket lifetime configured on the KDC."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:347
-msgid "krb5_renew_interval (integer)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:350
-msgid ""
-"The time in seconds between two checks if the TGT should be renewed. TGTs "
-"are renewed if about half of their lifetime is exceeded."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:355
-msgid "If this option is not set or 0 the automatic renewal is disabled."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:365
-msgid "krb5_use_fast (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:368
-msgid ""
-"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
-"authentication. The following options are supported:"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:373
-msgid ""
-"<emphasis>never</emphasis> use FAST, this is equivalent to not set this "
-"option at all."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:377
-msgid ""
-"<emphasis>try</emphasis> to use FAST, if the server does not support fast "
-"continue without."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:381
-msgid ""
-"<emphasis>demand</emphasis> to use FAST, fail if the server does not require "
-"fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:385
-msgid "Default: not set, i.e. FAST is not used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:388
-msgid "Please note that a keytab is required to use fast."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:391
-msgid ""
-"Please note also that sssd supports fast only with MIT Kerberos version 1.8 "
-"and above. If sssd used with an older version using this option is a "
-"configuration error."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-krb5.5.xml:400
-msgid "krb5_fast_principal (string)"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:403
-msgid "Specifies the server principal to use for FAST."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-krb5.5.xml:412
-msgid ""
-"Specifies if the host and user principal should be canonicalized. This "
-"feature is available with MIT Kerberos >= 1.7"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:65
-msgid ""
-"If the auth-module krb5 is used in a SSSD domain, the following options must "
-"be used. See the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
-"<manvolnum>5</manvolnum> </citerefentry> manual page, section <quote>DOMAIN "
-"SECTIONS</quote> for details on the configuration of a SSSD domain.  "
-"<placeholder type=\"variablelist\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:434
-msgid ""
-"The following example assumes that SSSD is correctly configured and FOO is "
-"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
-"example shows only configuration of Kerberos authentication, it does not "
-"include any identity provider."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd-krb5.5.xml:442
-#, no-wrap
-msgid ""
-"    [domain/FOO]\n"
-"    auth_provider = krb5\n"
-"    krb5_server = 192.168.1.1\n"
-"    krb5_realm = EXAMPLE.COM\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd-krb5.5.xml:453
-msgid ""
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd-ldap</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </citerefentry>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
-msgid "sss_groupadd"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupadd.8.xml:16
-msgid "create a new group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupadd.8.xml:21
-msgid ""
-"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:32
-msgid ""
-"<command>sss_groupadd</command> creates a new group. These groups are "
-"compatible with POSIX groups, with the additional feature that they can "
-"contain other groups as members."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupadd.8.xml:43
-msgid ""
-"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupadd.8.xml:48
-msgid ""
-"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
-"not given, it is chosen automatically."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupadd.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
-msgid "sss_userdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_userdel.8.xml:16
-msgid "delete a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_userdel.8.xml:21
-msgid ""
-"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:32
-msgid ""
-"<command>sss_userdel</command> deletes a user identified by login name "
-"<replaceable>LOGIN</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:44
-msgid "<option>-r</option>,<option>--remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:48
-msgid ""
-"Files in the user's home directory will be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:56
-msgid "<option>-R</option>,<option>--no-remove</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:60
-msgid ""
-"Files in the user's home directory will NOT be removed along with the home "
-"directory itself and the user's mail spool. Overrides the configuration."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:68
-msgid "<option>-f</option>,<option>--force</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:72
-msgid ""
-"This option forces <command>sss_userdel</command> to remove the user's home "
-"directory and mail spool, even if they are not owned by the specified user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_userdel.8.xml:80
-msgid "<option>-k</option>,<option>--kick</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_userdel.8.xml:84
-msgid "Before actually deleting the user, terminate all his processes."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_userdel.8.xml:95
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
-msgid "sss_groupdel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupdel.8.xml:16
-msgid "delete a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupdel.8.xml:21
-msgid ""
-"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:32
-msgid ""
-"<command>sss_groupdel</command> deletes a group identified by its name "
-"<replaceable>GROUP</replaceable> from the system."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupdel.8.xml:48
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupshow</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
-msgid "sss_groupshow"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_groupshow.8.xml:16
-msgid "print properties of a group"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_groupshow.8.xml:21
-msgid ""
-"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:32
-msgid ""
-"<command>sss_groupshow</command> displays information about a group "
-"identified by its name <replaceable>GROUP</replaceable>. The information "
-"includes the group ID number, members of the group and the parent group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_groupshow.8.xml:43
-msgid "<option>-R</option>,<option>--recursive</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_groupshow.8.xml:47
-msgid ""
-"Also print indirect group members in a tree-like hierarchy.  Note that this "
-"also affects printing parent groups - without <option>R</option>, only the "
-"direct parent will be printed."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_groupshow.8.xml:60
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupmod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_usermod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
-msgid "sss_usermod"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_usermod.8.xml:16
-msgid "modify a user account"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_usermod.8.xml:21
-msgid ""
-"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
-"arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:32
-msgid ""
-"<command>sss_usermod</command> modifies the account specified by "
-"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
-"on the command line."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:60
-msgid "The home directory of the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:71
-msgid "The user's login shell."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:82
-msgid ""
-"Append this user to groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
-"a comma separated list of group names."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:96
-msgid ""
-"Remove this user from groups specified by the <replaceable>GROUPS</"
-"replaceable> parameter."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:103
-msgid "<option>-l</option>,<option>--lock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:107
-msgid "Lock the user account. The user won't be able to log in."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_usermod.8.xml:114
-msgid "<option>-u</option>,<option>--unlock</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:118
-msgid "Unlock the user account."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_usermod.8.xml:129
-msgid "The SELinux user for the user's login."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_usermod.8.xml:140
-msgid ""
-"<citerefentry> <refentrytitle>sss_groupadd</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sss_groupdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_useradd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_userdel</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_cache.8.xml:10 sss_cache.8.xml:15
-msgid "sss_cache"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_cache.8.xml:16
-msgid "perform cache cleanup"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_cache.8.xml:21
-msgid ""
-"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_cache.8.xml:31
-msgid ""
-"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
-"records are forced to be reloaded from server as soon as related SSSD "
-"backend is online."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:42
-msgid ""
-"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:47
-msgid "Invalidate specific user."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:53
-msgid "<option>-U</option>,<option>--users</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:57
-msgid ""
-"Invalidate all user records. This option overrides invalidation of specific "
-"user if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:64
-msgid ""
-"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:69
-msgid "Invalidate specific group."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:75
-msgid "<option>-G</option>,<option>--groups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:79
-msgid ""
-"Invalidate all group records. This option overrides invalidation of specific "
-"group if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:86
-msgid ""
-"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:91
-msgid "Invalidate specific netgroup."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:97
-msgid "<option>-N</option>,<option>--netgroups</option>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:101
-msgid ""
-"Invalidate all netgroup records. This option overrides invalidation of "
-"specific netgroup if it was also set."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_cache.8.xml:108
-msgid ""
-"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
-"replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_cache.8.xml:113
-msgid "Restrict invalidation process only to a particular domain."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
-msgid "sss_debuglevel"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_debuglevel.8.xml:16
-msgid "change debug level while SSSD is running"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_debuglevel.8.xml:21
-msgid ""
-"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
-"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
-"replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_debuglevel.8.xml:32
-msgid ""
-"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
-"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
-"running."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_debuglevel.8.xml:59
-msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
-msgid "sss_ssh_authorizedkeys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refmeta><manvolnum>
-#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
-msgid "1"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_authorizedkeys.1.xml:16
-msgid "get OpenSSH authorized keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_authorizedkeys.1.xml:21
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>USER</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:32
-msgid ""
-"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
-"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
-"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> for more information)."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:41
-msgid ""
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
-"command> for public key user authentication if it is compiled with support "
-"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
-"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
-"<manvolnum>5</manvolnum></citerefentry> options."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:58
-#, no-wrap
-msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:51
-msgid ""
-"If <quote>AuthorizedKeysCommand</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by putting the following directive "
-"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
-"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_authorizedkeys.1.xml:69
-#, no-wrap
-msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:62
-msgid ""
-"If <quote>PubkeyAgent</quote> is supported, "
-"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
-"citerefentry> can be configured to use it by using the following directive "
-"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
-"\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_authorizedkeys.1.xml:87
-msgid ""
-"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_authorizedkeys.1.xml:98
-msgid ""
-"<citerefentry> <refentrytitle>sshd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sshd_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refname>
-#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
-msgid "sss_ssh_knownhostsproxy"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refnamediv><refpurpose>
-#: sss_ssh_knownhostsproxy.1.xml:16
-msgid "get OpenSSH host keys"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
-#: sss_ssh_knownhostsproxy.1.xml:21
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
-"<replaceable>options</replaceable> </arg> <arg "
-"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
-"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:33
-msgid ""
-"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
-"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
-"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
-"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
-"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
-"pubconf/known_hosts</filename> and estabilishes connection to the host."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:43
-msgid ""
-"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
-"create the connection to the host instead of opening a socket."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sss_ssh_knownhostsproxy.1.xml:55
-#, no-wrap
-msgid ""
-"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
-"GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts\n"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:48
-msgid ""
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
-"command> for host key authentication by using the following directives for "
-"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
-"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sss_ssh_knownhostsproxy.1.xml:69
-msgid ""
-"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:74
-msgid ""
-"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
-"default, port 22 is used."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sss_ssh_knownhostsproxy.1.xml:86
-msgid ""
-"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para>
-#: sss_ssh_knownhostsproxy.1.xml:97
-msgid ""
-"<citerefentry> <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>ssh_config</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</"
-"manvolnum> </citerefentry>."
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/service_discovery.xml:2
-msgid "SERVICE DISCOVERY"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/service_discovery.xml:4
-msgid ""
-"The service discovery feature allows back ends to automatically find the "
-"appropriate servers to connect to using a special DNS query."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:9
-msgid "Configuration"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:11
-msgid ""
-"If no servers are specified, the back end automatically uses service "
-"discovery to try to find a server. Optionally, the user may choose to use "
-"both fixed server addresses and service discovery by inserting a special "
-"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
-"preference is maintained. This feature is useful if, for example, the user "
-"prefers to use service discovery whenever possible, and fall back to a "
-"specific server when no servers can be discovered using DNS."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:23
-msgid "The domain name"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:25
-msgid ""
-"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> manual page for more details."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:35
-msgid "The protocol"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:37
-msgid ""
-"The queries usually specify _tcp as the protocol. Exceptions are documented "
-"in respective option description."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/service_discovery.xml:42
-msgid "See Also"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/service_discovery.xml:44
-msgid ""
-"For more information on the service discovery mechanism, refer to RFC 2782."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/upstream.xml:1
-msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
-msgstr ""
-
-#. type: Content of: <refsect1><title>
-#: include/failover.xml:2
-msgid "FAILOVER"
-msgstr ""
-
-#. type: Content of: <refsect1><para>
-#: include/failover.xml:4
-msgid ""
-"The failover feature allows back ends to automatically switch to a different "
-"server if the primary server fails."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:8
-msgid "Failover Syntax"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:10
-msgid ""
-"The list of servers is given as a comma-separated list; any number of spaces "
-"is allowed around the comma. The servers are listed in order of preference. "
-"The list can contain any number of servers."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><title>
-#: include/failover.xml:17
-msgid "The Failover Mechanism"
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:19
-msgid ""
-"The failover mechanism distinguishes between a machine and a service. The "
-"back end first tries to resolve the hostname of a given machine; if this "
-"resolution attempt fails, the machine is considered offline. No further "
-"attempts are made to connect to this machine for any other service. If the "
-"resolution attempt succeeds, the back end tries to connect to a service on "
-"this machine. If the service connection attempt fails, then only this "
-"particular service is considered offline and the back end automatically "
-"switches over to the next service.  The machine is still considered online "
-"and might still be tried for another service."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:32
-msgid ""
-"Further connection attempts are made to machines or services marked as "
-"offline after a specified period of time; this is currently hard coded to 30 "
-"seconds."
-msgstr ""
-
-#. type: Content of: <refsect1><refsect2><para>
-#: include/failover.xml:37
-msgid ""
-"If there are no more machines to try, the back end as a whole switches to "
-"offline mode, and then attempts to reconnect every 30 seconds."
-msgstr ""
-
-#. type: Content of: <varlistentry><term>
-#: include/param_help.xml:3
-msgid "<option>-h</option>,<option>--help</option>"
-msgstr ""
-
-#. type: Content of: <varlistentry><listitem><para>
-#: include/param_help.xml:7
-msgid "Display help message and exit."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:3
-msgid ""
-"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
-"default value as well as the lowest allowed value, 0xFFF0 is the most "
-"verbose mode. This setting overrides the settings from config file."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:8
-msgid "Currently supported debug levels:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:11
-msgid ""
-"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
-"SSSD from starting up or causes it to cease running."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:15
-msgid ""
-"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
-"the SSSD, but one that indicates that at least one major feature is not "
-"going to work properly."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:20
-msgid ""
-"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
-"particular request or operation has failed."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:24
-msgid ""
-"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
-"percolate down to cause the operation failure of 2."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:28
-msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:31
-msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:34
-msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:37
-msgid ""
-"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:40
-msgid ""
-"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
-"may be interesting."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:43
-msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:46
-msgid ""
-"To log required debug levels, simply add their numbers together as shown in "
-"following examples:"
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:49
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
-"serious failures and function data use 0x0270."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:53
-msgid ""
-"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
-"function data, trace messages for internal control functions use 0x1310."
-msgstr ""
-
-#. type: Content of: <listitem><para>
-#: include/debug_levels.xml:57
-msgid ""
-"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
-"1.7.0.  Older format (numbers from 0-10) is compatible but deprecated."
-msgstr ""
-
-#. type: Content of: outside any tag (error?)
-#: include/experimental.xml:1
-msgid ""
-"<emphasis> This is an experimental feature, please use http://fedorahosted."
-"org/sssd to report any issues.  </emphasis>"
-msgstr ""